Hawkynt

E2 (NTT AES candidate)

Educational implementation of E2 block cipher adapted as a stream cipher using keystream generation. Originally an AES candidate by NTT with Feistel structure.

Properties

Property	Value
Category	Stream Ciphers
Sub-category	Stream Cipher
Security status	🎓 Educational Only
Complexity	Not specified
Inventor	NTT (Nippon Telegraph and Telephone)
Year	1998
Origin	🇯🇵 Japan
Source	algorithms/stream/e2.js

Parameters

Parameter	Supported values
Key sizes	16 bytes (128 bits)

Security

Status: 🎓 Educational Only

Block cipher adapted for educational stream cipher demonstration. Original E2 was an AES candidate.

No vulnerabilities are recorded for this implementation.

Documentation

• E2 (cipher) - Wikipedia
• E2 - A Candidate Cipher for AES (NTT, First AES Candidate Conference, 1998)
• NIST AES Development Archive (Round 1 candidates)

References

• NTT Social Informatics Laboratories - Encryption Archive (E2 submission)
• Optimized Software Implementations of E2 (Aoki and Ueda, NIST AES Candidate Conference, 1999)

Test vectors

1 vector ship with this algorithm and run in the test suite. Byte values are hexadecimal.

Vector 1 — Self-computed vector: output of this educational E2-based keystream construction, verified for self-consistency (not an official NTT E2 test vector - this implementation is a simplified stream-cipher adaptation, not the original E2 Feistel block cipher)

Field	Value
key	00010203040506070809101112131415
input	0001020304050607
expected	1a1b18191e1f1c1d

---

← All algorithms

This site is open source. Improve this page.