From Wikipedia, the free encyclopedia RC6

RC6
RC6 support a wide variety of word-lengths, key
sizes and number of rounds. RC6 is very sim-
ilar to RC5 in structure, using data-depend-
ent rotations, modular addition and XOR op-
erations; in fact, RC6 could be viewed as in-
terweaving two parallel RC5 encryption pro-
cesses. However, RC6 does use an extra mul-
tiplication operation not present in RC5 in or-
der to make the rotation dependent on every
bit in a word, and not just the least signific-
ant few bits.

Encryption/Decryption
// Encryption/Decryption with RC6-w/r/b
//
The Feistel function of the RC6 algorithm. // Input: Plaintext stored in four w-bit inp
// r is the number of rounds
General
// w-bit round keys S[0, ... , 2r + 3]
Designers Ron Rivest, Matt Robshaw, Ray //
Sidney, Yiqun Lisa Yin // Output: Ciphertext stored in A, B, C, D
First 1998 //
published // ’’’Encryption Procedure:’’’

Derived RC5
B = B + S[0]
from
D = D + S[1]
Certification AES finalist for i = 1 to r do
Cipher detail {
t = (B(2B + 1)) <<< lg w
Key sizes 128, 192, or 256 bits u = (D(2D + 1)) <<< lg w
Block sizes 128 bits A = ((A ^ t) <<< u) + S[2i]
C = ((C ^ u) <<< t) + S[2i + 1
Structure Feistel network
(A, B, C, D) = (B, C, D, A)
Rounds 20
}
In cryptography, RC6 is a symmetric key A = A + S[2r + 2]
block cipher derived from RC5. It was de- C = C + S[2r + 3]
signed by Ron Rivest, Matt Robshaw, Ray
Sidney, and Yiqun Lisa Yin to meet the re-
quirements of the Advanced Encryption // ’’’Decryption Procedure:’’’
Standard (AES) competition. The algorithm
was one of the five finalists, and was also C = C - S[2r + 3]
submitted to the NESSIE and CRYPTREC A = A - S[2r + 2]
projects. It is a proprietary algorithm, paten-
ted by RSA Security. for i = r downto 1 do
RC6 proper has a block size of 128 bits {
and supports key sizes of 128, 192 and 256 (A, B, C, D) = (D, A, B, C)
bits, but, like RC5, it can be parameterised to u = (D.(2D + 1)) <<< lg w

1
From Wikipedia, the free encyclopedia RC6

t = (B.(2B + 1)) <<< lg w The emphasis on the word "if" suggests that
C = ((C - S[2i + 1]) >>> t) RSA
^ u Security Inc. may now require licensing
A = ((A - S[2i]) >>> u) ^ t and royalty payments for any products using
} the RC6 algorithm. RC6 is a patented encryp-
D = D - S[1] tion algorithm (U.S. Patent 5,724,428 and
B = B - S[0] U.S. Patent 5,835,600).

Licensing References
As RC6 has not been selected for the AES, it • R.L. Rivest, M.J.B. Robshaw, R.Sidney,
is not guaranteed that RC6 is royalty-free. As and Y.L. Yin. The RC6 Block Cipher. v1.1,
of January 2007, a web page on the official August 1998.
web site of the designers of RC6, RSA Labor- • J. Beuchat FPGA Implementations of the
atories, states the following: RC6 Block Cipher.
"We emphasize that if RC6 is selected for
the AES, RSA Security will not require
any licensing or royalty payments for
External links
products using the algorithm". • SCAN’s entry on RC6
• RSA Security’s RC6 page

Retrieved from "http://en.wikipedia.org/wiki/RC6"

Categories: Block ciphers

This page was last modified on 17 March 2009, at 12:55 (UTC). All text is available under the
terms of the GNU Free Documentation License. (See Copyrights for details.) Wikipedia® is a
registered trademark of the Wikimedia Foundation, Inc., a U.S. registered 501(c)(3) tax-
deductible nonprofit charity. Privacy policy About Wikipedia Disclaimers