3 ms·
Right, I should've added I agree with GP that ARX ciphers are incredibly simple and the ability to backdoor them would be a very novel (and concerning) discover
by cyphar 7y ago
Right, I should've added I agree with GP that ARX ciphers are incredibly simple and the ability to backdoor them would be a very novel (and concerning) discovery.
My point is that "the values come from pi" is not necessarily proof that the constants really are "nothing up my sleeve". Bernstein was discussing this in the context of NIST curves (which could be backdoored), but the same one-in-a-million maths works for any constants (so long as you happen to know a weak-constants vulnerability that isn't known by the public).