Paper 2007/044

Design and Primitive Specification for Shannon

Philip Hawkes, Cameron McDonald, Michael Paddon, Gregory Rose, and Miriam Wiggers de Vries


Shannon is a synchronous stream cipher with message authentication functionality, designed according to the ECrypt NoE call for stream cipher primitives, profile 1A (but well after the call). Shannon is named in memory of Claude E. Shannon[20] of Bell Labs and MIT, founder of Information Theory. Shannon is an entirely new design, influenced by members of the SOBER family of stream ciphers, Helix/Phelix, Trivium, Scream, and SHA-256. It consists of a single 32-bit wide, 16-element nonlinear feedback shift register and an extra word, which is supplemented for message authentication with 32 parallel CRC-16 registers. Shannon is free to use for any purpose, and reference source code can be found at .

Available format(s)
Secret-key cryptography
Publication info
Published elsewhere. Unknown where it was published
Stream ciphermessage authentication
Contact author(s)
ggr @ qualcomm com
2007-02-14: received
Short URL
Creative Commons Attribution


      author = {Philip Hawkes and Cameron McDonald and Michael Paddon and Gregory Rose and Miriam Wiggers de Vries},
      title = {Design and Primitive Specification for Shannon},
      howpublished = {Cryptology ePrint Archive, Paper 2007/044},
      year = {2007},
      note = {\url{}},
      url = {}
Note: In order to protect the privacy of readers, does not use cookies or embedded third party content.