• “When will we be secure? Nobody knows for sure – but it cannot happen before commercial security products and services possess not only enough functionality to satisfy customers’ stated needs, but also sufficient assurance of quality, reliability, safety, and appropriateness for use. Such assurances are lacking in most of today’s commercial security products and services.”

    Brian Snow, Former Technical Director of the US National Security Agency (NSA), "We need Assurance", 2005

    Read more...
  • "Many crypto-systems considered robust have been broken after a certain amount of time (between 10-20 years).  ... We need to build crypto-systems that offer long term security, for example for protecting financial and medical information (medical information such as our DNA may be sensitive information with impact on our children, our grandchildren and beyond)."

    SecurIST, “D3.3 – ICT Security & Dependability Research beyond 2010: Final Strategy”, January 2007

     

    Read more...
  • In the next five years we will counter many 'hacker' attacks but we will not be safe from Nation States and other large entities

    Brian Snow, Former Technical Director of the US National Security Agency (NSA), "We need assurance!", 1999-2008

    Read more...
Home Resources Frequently asked questions Symmetric Primitives faq: Is it possible to create a proprietary variation of a cipher?
faq: Is it possible to create a proprietary variation of a cipher?
Synaptic Facts and FAQs - Symmetric Primitives


In high security systems it is often desirable to use a cryptographic operation that is in some way different from what other people are using. The choice of a different algorithm, or a secure variation of a fixed algorithm enables risk to be managed through diversification. Many classes of cryptographic attack are most efficient when implemented in bulk – the investment in setting up the cost of the attack can be shared over potentially hundreds of millions of targets. Diversification, if done correctly, may increase the difficulty or cost of such an investment.  Diversification can also protect against subtle attacks that send information to one cryptographic system and send the result to another completely independently run cryptographic system in a way that breaks the security of one or both of the systems.

Synaptic offers a range of data privacy and integrity operations that offer a diversification technique called family keying. This allows any organisation to create a proprietary variation of the cipher in a strictly defined way that does not weaken the security of the system. The family key is designed the change the cipher in a way different to the standard symmetric key. The family key does not need to be secret. Synaptic Labs' VEST cipher offers a range of family keying techniques that allow variations of the cipher to be built for a wide range of application scenarios (such as unique cipher per chip for verifying the authenticity of a device, or for increasing the cost of third parties cloning their authentication devices).  Synaptic Labs' PQSDES cipher offers family keying that is optimised to protect against subtle cross-protocol attacks.

Last Updated on Friday, 16 January 2009 13:29