Skip to content

Security: anoneurx/black-cipher

Security

SECURITY.md

ANONEURX BLACK CIPHER — Security Notice

ANONEURX BLACK CIPHER IS EXPERIMENTAL RESEARCH.

Do not use this algorithm to protect production secrets. The security of the current construction has not been established through sufficient independent cryptanalysis.

Security Status

"ANONEURX BLACK CIPHER is experimental cryptographic research. The security of the current construction has not been established through sufficient independent cryptanalysis. Do not use it to protect production secrets."

Design Principles

The security of this system must NOT depend on:

  • Source-code secrecy
  • Obscurity
  • Hidden constants
  • Secret algorithm structure
  • Proprietary undocumented behavior

Assume an attacker knows:

  • Complete source code
  • Complete algorithm specification
  • Round structure
  • Key schedule
  • Cipher parameters
  • Serialization format
  • Implementation details
  • Test vectors

The only fundamental secret should be the cryptographic key.

Threat Model

This section will be expanded as the project develops. Currently, the threat model is under active research.

Research Goal

The goal is to actively attempt to break Black Cipher using:

  • Differential analysis
  • Linear analysis
  • Avalanche testing
  • Statistical bias
  • Reduced-round attacks
  • Related-key experiments
  • Collision experiments
  • Search for weak keys
  • Structural analysis
  • Fuzzing

Contributing

Security-related changes require thorough analysis. See CONTRIBUTING.md for details.

License

See LICENSE for licensing information.

There aren't any published security advisories