Camellia Block Cipher Specification
Camellia is a 128-bit Feistel cipher jointly developed by Mitsubishi and NTT, certified for ISO/IEC and NESSIE.
Design Overview
Camellia uses a 128-bit Feistel structure with 18 rounds for 128-bit keys and 24 rounds for 192/256-bit keys. It employs key-dependent S-boxes built from two fixed S-boxes and a key schedule producing rotated subkeys. The cipher is optimized for both software and hardware implementations. It is standardized in ISO/IEC 18033-3 and selected by NESSIE and CRYPTREC.
- block size
- 128 bits
- key sizes
- 128, 192, 256 bits
- rounds
- 18 or 24
16 bytessame as AESkey-size dependentSecurity Status
Camellia has withstood extensive cryptanalysis with no full-round breaks known. Differential and linear cryptanalysis bounds have been proven for reduced rounds. It is widely deployed in Japan and recommended by CRYPTREC for e-government. The cipher shares AES-level security with a different design lineage.
- differential
- Proven bounds
- linear
- Proven bounds
- certification
- ISO/IEC 18033-3
reduced roundsreduced roundsNESSIE approved