Paper 2014/271

STRIBOB: Authenticated Encryption from GOST R 34.11-2012 LPS Permutation

Markku-Juhani O. Saarinen


Authenticated encryption algorithms protect both the confidentiality and integrity of messages in a single processing pass. In this note we show how to utilize the $L \circ P \circ S$ transform of the Russian GOST R 34.11-2012 standard hash ``Streebog'' to build an efficient, lightweight algorithm for Authenticated Encryption with Associated Data (AEAD) via the Sponge construction and BLNK padding. The proposed algorithm ``StriBob'' has attractive security properties, is faster than the Streebog hash alone, twice as fast as the GOST 28147-89 encryption algorithm, and requires only a modest amount of running-time memory. StriBob is a Round 1 candidate in the CAESAR competition.

Note: To appear in CTCrypt 2014 workshop, 05–06 June 2014, Moscow RU.

Available format(s)
Secret-key cryptography
Publication info
Published elsewhere. Major revision. Proc. CTCrypt '14 (05-06 June 2014, Moscow). To appear in different form in Matematicheskie Voprosy Kriptografii [Mathematical Aspects of Cryptography], Steklov Mathematical Institute of RAS
StriBobAuthenticated EncryptionGOST R 34.11-2012StreebogSponge ConstructionDuplexWrapBLNK PaddingCAESAR
Contact author(s)
mjos @ iki fi
2015-04-14: last of 6 revisions
2014-04-21: received
See all versions
Short URL
Creative Commons Attribution


      author = {Markku-Juhani O.  Saarinen},
      title = {STRIBOB: Authenticated Encryption from GOST R 34.11-2012 LPS Permutation},
      howpublished = {Cryptology ePrint Archive, Paper 2014/271},
      year = {2014},
      note = {\url{}},
      url = {}
Note: In order to protect the privacy of readers, does not use cookies or embedded third party content.