Re: [Cfrg] RFC 5742 conflict review for draft-dolmatov-kuznyechik

["Blumenthal, Uri - 0553 - MITLL" <[e-mail]>]

>>> >> Is anyone on the CFRG list aware of any cryptanalysis of the block cipher
>>> >> Kuznyechik?
>>> >>
>>> >> I realise it's a relatively new algorithm, although it seems to be a
>>> >> development of previous ciphers from the same stable, but my search
>>> engine
>>> >> of choice only turned up a couple of references.
>>> >>
>>> >> So what's the state-of-the-art here?
>> >
>> > The only reference I know is here:
>> > http://cvo-lab.blogspot.fr/2015/01/the-new-gost-standard-from-russian.html

This is better than nothing, but not by much. ;)

These two works (a paper and a presentation) might be of interest:
https://eprint.iacr.org/2015/812.pdf
http://crypto.2015.rump.cr.yp.to/1ea2c6c01144e0e7f6b14b324c5e4562.pdf

> 
> Why is there no design document comparable to that for Rijndael? Of course
> it's possible to write such a document by computing all differentials, the
> minimum distance of the linear layer, etc, but it seems strange that this
> doesn't exist.

:-)

Still, I think the RFC describing it should be published, to provide
interoperability reference within the IETF protocols for those who need that
algorithm.
Likewise, I’d expect an informational RFC describing Kalyna (Ukrainian
contest winner), which looks somewhat more appealing.