Hawkynt

FF1

Format-Preserving Encryption from NIST SP 800-38G.

Properties

Property	Value
Category	Block Ciphers
Sub-category	Format-Preserving Encryption
Security status	Not classified
Complexity	Advanced
Inventor	NIST
Year	2016
Origin	🇺🇸 United States
Source	algorithms/block/ff.js

Parameters

Parameter	Supported values
Key sizes	16 bytes (128 bits) to 32 bytes (256 bits) in steps of 8 bytes
Block sizes	2 bytes (16 bits) to 56 bytes (448 bits)

Security

Status: not classified — treat as unverified.

No vulnerabilities are recorded for this implementation.

Documentation

• NIST Special Publication 800-38G
• FF1 and FF3 Format-Preserving Encryption Algorithms

References

• BouncyCastle FF1 Implementation
• BouncyCastle FF1 Test Vectors
• Python FF1 Implementation

Test vectors

13 vectors ship with this algorithm and run in the test suite. Byte values are hexadecimal.

Vector 1 — NIST FF1 Sample #1 AES-128 radix 10

Field	Value
key	2b7e151628aed2a6abf7158809cf4f3c
tweak	(empty)
radix	10
input	30313233343536373839
expected	32343333343737343834

Vector 2 — NIST FF1 Sample #2 AES-128 radix 10

Field	Value
key	2b7e151628aed2a6abf7158809cf4f3c
tweak	39383736353433323130
radix	10
input	30313233343536373839
expected	36313234323030373733

Vector 3 — NIST FF1 Sample #3 AES-128 radix 36

Field	Value
key	2b7e151628aed2a6abf7158809cf4f3c
tweak	3737373770717273373737
radix	36
input	30313233343536373839616263646566676869
expected	6139747634306d6c6c396b647535303965756d

Vector 4 — NIST FF1 Sample #4 AES-192 radix 10

Field	Value
key	2b7e151628aed2a6abf7158809cf4f3cef4359d8d580aa4f
tweak	(empty)
radix	10
input	30313233343536373839
expected	32383330363638313332

Vector 5 — NIST FF1 Sample #5 AES-192 radix 10

Field	Value
key	2b7e151628aed2a6abf7158809cf4f3cef4359d8d580aa4f
tweak	39383736353433323130
radix	10
input	30313233343536373839
expected	32343936363535353439

Vector 6 — NIST FF1 Sample #6 AES-192 radix 36

Field	Value
key	2b7e151628aed2a6abf7158809cf4f3cef4359d8d580aa4f
tweak	3737373770717273373737
radix	36
input	30313233343536373839616263646566676869
expected	78626a336b7633356a72617778763332797372

Vector 7 — NIST FF1 Sample #7 AES-256 radix 10

Field	Value
key	2b7e151628aed2a6abf7158809cf4f3cef4359d8d580aa4f7f036d6f04fc6a94
tweak	(empty)
radix	10
input	30313233343536373839
expected	36363537363637303039

Vector 8 — NIST FF1 Sample #8 AES-256 radix 10

Field	Value
key	2b7e151628aed2a6abf7158809cf4f3cef4359d8d580aa4f7f036d6f04fc6a94
tweak	39383736353433323130
radix	10
input	30313233343536373839
expected	31303031363233343633

Vector 9 — NIST FF1 Sample #9 AES-256 radix 36

Field	Value
key	2b7e151628aed2a6abf7158809cf4f3cef4359d8d580aa4f7f036d6f04fc6a94
tweak	3737373770717273373737
radix	36
input	30313233343536373839616263646566676869
expected	7873386130617a6832617679616c797a757764

Vector 10 — FF1 radix 36, 36 numerals, d = 16 (Bouncy Castle FpeFf1Engine)

Field	Value
key	2b7e151628aed2a6abf7158809cf4f3c
tweak	3737373770717273373737
radix	36
input	30313233343536373839616263646566 6768696a6b6c6d6e6f70717273747576 7778797a
expected	657463747162687734326969667a6871 69733367303334623371637264726334 64653062

Vector 11 — FF1 radix 36, 37 numerals, d = 20 (Bouncy Castle FpeFf1Engine)

Field	Value
key	2b7e151628aed2a6abf7158809cf4f3c
tweak	3737373770717273373737
radix	36
input	30313233343536373839616263646566 6768696a6b6c6d6e6f70717273747576 7778797a30
expected	30797a6b316468337172697a64336661 6b6e646f667a306c737776616273616a 7634356f39

Vector 12 — FF1 radix 36, 42 numerals, d = 20 (Bouncy Castle FpeFf1Engine)

Field	Value
key	2b7e151628aed2a6abf7158809cf4f3cef4359d8d580aa4f
tweak	(empty)
radix	36
input	7a797877767574737271706f6e6d6c6b 6a696867666564636261393837363534 333231307a7978777675
expected	306b6d37796f76346a383364657a3578 6a676a306633676172787a6274757638 6c6233386f796c35646c

Vector 13 — FF1 radix 36, 56 numerals, d = 24 (Bouncy Castle FpeFf1Engine)

Field	Value
key	2b7e151628aed2a6abf7158809cf4f3cef4359d8d580aa4f7f036d6f04fc6a94
tweak	39383736353433323130
radix	36
input	30313233343536373839616263646566 6768696a6b6c6d6e6f70717273747576 7778797a303132333435363738396162 636465666768696a
expected	6b6a67676c726878677a363038357a34 767934366631326b656e6d69396d736c 6534387a6c78623169676e356838777a 7136617435733479

---

← All algorithms

This site is open source. Improve this page.