GOST information in Applied Crypography 2nd Ed.

David Crick <dacrick@ntlworld.com> Sat, 22 January 2005 12:59 UTC

Received: from above.proper.com (above.proper.com [208.184.76.39]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id HAA01142 for <openpgp-archive@lists.ietf.org>; Sat, 22 Jan 2005 07:59:00 -0500 (EST)
Received: from above.proper.com (localhost.vpnc.org [127.0.0.1]) by above.proper.com (8.12.11/8.12.9) with ESMTP id j0MCY9JI027406; Sat, 22 Jan 2005 04:34:09 -0800 (PST) (envelope-from owner-ietf-openpgp@mail.imc.org)
Received: (from majordom@localhost) by above.proper.com (8.12.11/8.12.9/Submit) id j0MCY9hG027404; Sat, 22 Jan 2005 04:34:09 -0800 (PST)
X-Authentication-Warning: above.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f
Received: from mta08-winn.mailhost.ntl.com (smtpout16.mailhost.ntl.com [212.250.162.16]) by above.proper.com (8.12.11/8.12.9) with ESMTP id j0MCY8ax027363 for <ietf-openpgp@imc.org>; Sat, 22 Jan 2005 04:34:08 -0800 (PST) (envelope-from dacrick@ntlworld.com)
Received: from aamta03-winn.mailhost.ntl.com ([212.250.162.8]) by mta08-winn.mailhost.ntl.com with ESMTP id <20050122123402.IQBR8887.mta08-winn.mailhost.ntl.com@aamta03-winn.mailhost.ntl.com> for <ietf-openpgp@imc.org>; Sat, 22 Jan 2005 12:34:02 +0000
Received: from [192.168.1.100] (really [81.100.121.98]) by aamta03-winn.mailhost.ntl.com with ESMTP id <20050122123402.GKKT9818.aamta03-winn.mailhost.ntl.com@[192.168.1.100]> for <ietf-openpgp@imc.org>; Sat, 22 Jan 2005 12:34:02 +0000
Message-ID: <41F24834.3060306@ntlworld.com>
Date: Sat, 22 Jan 2005 12:33:56 +0000
From: David Crick <dacrick@ntlworld.com>
User-Agent: Mozilla Thunderbird 1.0 (X11/20041206)
X-Accept-Language: en-gb, en, en-us
MIME-Version: 1.0
To: ietf-openpgp@imc.org
Subject: GOST information in Applied Crypography 2nd Ed.
Content-Type: text/plain; charset="ISO-8859-1"; format="flowed"
Content-Transfer-Encoding: 7bit
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Section 14.1, pages 331 - 334
GOST Block Cipher (GOST 28147-89)

Mentions use of random S-Boxes, but also states:

"More recently, a set of S-Boxes used in an application
for the Central Bank of the Russian Federation surfaced.
These S-Boxes are also used in the GOST one-way hash
function."

S-Box 1:
  4 10  9  2 13  8  0 14  6 11  1 12  7 15  5  3

S-Box 2:
14 11  4 12  6 13 15 10  2  3  8  1  0  7  5  9

S-Box 3:
  5  8  1 13 10  3  4  2 14 15 12  7  6  0  9 11

S-Box 4:
  7 13 10  1  0  8  9 15 14  4  6 12 11  2  5  3

S-Box 5:
  6 12  7  1  5 15 13  8  4 10  9 14  0  3 11  2

S-Box 6:
  4 11 10  0  7  2  1 13  3  6  8  5  9 12 15 14

S-Box 7:
13 11  4  1  3 15  5  9  0 10 14  7  6  8  2 12

S-Box 8:
  1 15 13  0  5  7 10  4  9  2  3 14  6 11  8 12


Section 18.11, page 454
GOST Hash Function (GOST R 34.11-94)

NB errata: "XOR of all the message blocks" SHOULD BE
"sum of the message blocks as if they were 256-bit
integers"


Section 20.3, pages 495 - 496
GOST Digital Signature Algorithm (GOST R 34.10-94)

Schneier notes that q is 256 bits compared to DSA's 160.


Part V, pages 643 - 647
GOST C source code (uses ECB mode)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)

iD8DBQFB8kfWcuzN6jLXKHYRAkwmAJ9ZJ5QXfAejrwq9/vBeGRSMEJNE8ACdGW9I
QqCMfBiGAov9EdQRePE3190=
=cpcO
-----END PGP SIGNATURE-----