Skip to content
uencoder

Camellia

Camellia is a symmetric block cipher jointly designed by Mitsubishi and NTT, using 128-bit blocks with 128/192/256-bit keys, and was adopted as a recommended algorithm by NESSIE and CRYPTREC.

Purpose

It offers an alternative with security strength comparable to AES but a different structure, and is widely used in Japan and South Korea and in IETF protocols.

Mechanism

It is a Feistel network (18 rounds for 128-bit keys, 24 rounds for 192/256-bit keys) combining S-boxes (similar to AES) with P functions. The key schedule derives the subkeys for each round. Its structure differs from AES, providing design diversity.

Use cases

  • TLS cipher suites (preferred in Japan and South Korea)
  • IPsec ESP
  • Japanese e-government
  • Optional algorithm in IETF protocols

Examples

  • Input
    key=128bit, data=16bytes
    Output
    16-byte ciphertext

    NESSIE recommended

Common errors

Using Camellia on Western systems that lack hardware acceleration
Evaluate platform support, or use AES-NI instead

Related terms

Related tools

References