Overview
ISO/IEC 18033-3:2010/Amd 1:2021 is an important international standard amendment that expands the scope of encryption algorithms covered under Part 3 of ISO/IEC 18033-3, which focuses on block ciphers. This amendment introduces the SM4 block cipher – a symmetric encryption algorithm notable for its use in secure information technology systems. Developed as part of the Chinese national standards, SM4 has been incorporated into international cryptographic standards, elevating its global significance in data security protocols.
This amendment updates the original 2010 standard by increasing the number of specified block ciphers from seven to eight, explicitly including SM4 alongside established ciphers like AES, Camellia, and SEED. The standard defines the algorithm’s operations, including encryption, decryption, key scheduling, and the associated mathematical functions.
Key Topics
-
SM4 Block Cipher Integration
SM4 is a symmetric block cipher operating on 128-bit data blocks using a 128-bit key with 32 rounds of processing. It introduces robust security through a combination of nonlinear and linear transformations, leveraging S-box substitutions and permutation functions.
-
Encryption and Decryption Procedures
The standard outlines detailed steps for SM4 encryption and decryption. Decryption mirrors encryption but applies the subkeys in reverse order, ensuring data can be securely recovered.
-
Mathematical Functions of SM4
The algorithm’s core relies on the function F, which combines XOR operations and the permutation T. The permutation T is a composition of a nonlinear transformation τ (using an S-box) and a linear transformation L, both operating on 32-bit words.
-
Key Scheduling Algorithm
SM4’s key schedule transforms the 128-bit master key into 32 subkeys using specific constants (FK, CK) and a distinct permutation T’. This mechanism ensures key variation across rounds, enhancing cryptographic strength.
-
Numerical Examples and Test Vectors
The amendment provides comprehensive numerical examples showcasing plaintext, keys, intermediate values, subkeys, and final ciphertext outputs. These examples support developers and implementers in validating conformance to the standard.
-
Patent and Licensing Notes
Like many international standards, certain elements of SM4 may be subject to patent rights. ISO and IEC disclaim responsibility for identifying all such rights, so implementers should consult national patent databases and licensing terms.
Applications
-
Secure Communication Systems
SM4’s inclusion in ISO/IEC 18033-3 supports its adoption in cryptographic modules for confidential data transmission, ensuring robust encryption in commercial and governmental communication networks.
-
Hardware and Software Security Products
The algorithm’s design allows efficient implementation in both software and compact hardware, making it suitable for embedded security devices, smart cards, and IoT applications that demand lightweight yet secure encryption.
-
International Standardization Alignment
SM4’s endorsement by ISO/IEC facilitates interoperability and compliance in multi-national environments, especially critical for organizations engaging in cross-border data exchange and requiring adherence to recognized encryption standards.
-
Chinese Cryptography Ecosystem
SM4 plays a pivotal role within Chinese national cryptographic standards (GM/T 0002-2012), and its formal recognition by ISO supports broader global deployment of trusted technologies originating from China's cybersecurity framework.
Related Standards
- ISO/IEC 18033-1 to 4 – Covers various encryption algorithms beyond block ciphers, including stream ciphers and public-key cryptography.
- AES (Advanced Encryption Standard) – Another major block cipher referenced in this standard, used extensively worldwide.
- GM/T 0002-2012 – Chinese national standard that originally specifies the SM4 algorithm, cited in the ISO amendment.
- ISO/IEC JTC 1/SC 27 – The technical subcommittee responsible for information security, cybersecurity, and privacy protection standards including this amendment.
- ISO/IEC Directives Part 1 and 2 – Guidelines for the development and editorial rules of ISO and IEC standards, ensuring consistent documentation practices.
By integrating SM4 into ISO/IEC 18033-3, this amendment reinforces the suite of internationally recognized encryption algorithms, enhancing global cybersecurity infrastructure with a proven symmetric block cipher. Organizations implementing cryptographic solutions can rely on this standard to achieve compliance, interoperability, and robust security.
Open preview (PDF)Information technology — Security techniques — Encryption algorithms — Part 3: Block ciphers — Amendment 1: SM4