Hawkynt

Moustique

Self-synchronizing stream cipher built around a 96-bit conjugated cellular shift register whose feedback rule is driven by the produced ciphertext bit, followed by a 7-stage compression pipeline that reduces 128 register bits to one keystream bit. Uses a 96-bit key and a 104-bit starting value consumed as a 105-clock warm-up.

Properties

Property Value
Category Stream Ciphers
Sub-category Stream Cipher
Security status ❌ Broken
Complexity Expert
Inventor Joan Daemen, Paris Kitsos
Year 2005
Origin 🇧🇪 Belgium
Source algorithms/stream/darkcrypt-moustique.js

Parameters

Parameter Supported values
Key sizes 12 bytes (96 bits)
Nonce sizes 13 bytes (104 bits)

Security

Status: ❌ Broken

Known vulnerabilities

Issue Description Mitigation
Cryptanalysis of the Self-Synchronizing Stream Cipher Moustique (Käsper, Rijmen, Bjørstad, Rechberger, Robshaw, Sekar) — —

Documentation

References

Test vectors

5 vectors ship with this algorithm and run in the test suite. Byte values are hexadecimal.

Vector 1 — eSTREAM Moustique testvalues.txt - zero key, zero starting value, zero plaintext

Field Value
key 000000000000000000000000
iv 00000000000000000000000000
input 00000000000000000000000000000000
expected ffc02501a57e0bf7840e8b8fe2edef46

Vector 2 — eSTREAM Moustique testvalues.txt - zero key, zero starting value, all-ones plaintext

Field Value
key 000000000000000000000000
iv 00000000000000000000000000
input ffffffffffffffffffffffffffffffff
expected 00000000000000000000000000000000

Vector 3 — eSTREAM Moustique testvalues.txt - zero key, zero starting value, counting plaintext

Field Value
key 000000000000000000000000
iv 00000000000000000000000000
input 0123456789abcdef0123456789abcdef
expected fee35ee5484164a0fee95934fd771361

Vector 4 — eSTREAM Moustique testvalues.txt - zero key, zero starting value, descending plaintext

Field Value
key 000000000000000000000000
iv 00000000000000000000000000
input fedcba9876543210fedcba9876543210
expected 0123172a369bce1d035f3447ccb75001

Vector 5 — DarkCrypt Moustique - 96-bit key, zero starting value, incrementing 64-byte input

Field Value
key 000102030405060708090a0b
iv 00000000000000000000000000
input 000102030405060708090a0b0c0d0e0f 101112131415161718191a1b1c1d1e1f 202122232425262728292a2b2c2d2e2f 303132333435363738393a3b3c3d3e3f
expected 0001021c69bbf834446db204fe215faa 5c9dcebd7d420f1b95b50687eb641265 064b1664db647d5976dd3d4ebd7542a1 1fff0fb491ca8ff9686f5d094d72fb33

← All algorithms

This site is open source. Improve this page.