Overview
ISO/IEC 18033-4:2011 - "Information technology - Security techniques - Encryption algorithms - Part 4: Stream ciphers" defines a framework, algorithm specifications, and object identifiers for stream cipher techniques. The standard specifies keystream generators, output functions for combining keystream and plaintext, and assigns object identifiers (OIDs) to dedicated keystream generators in accordance with ISO/IEC 9834. It is the second edition and updates the 2005 edition (including the 2009 amendment).
Key topics and technical requirements
- Stream cipher models: Clear definitions for both synchronous and self‑synchronizing keystream generators, including the required functions:
- Init (initialization function),
- Next (next‑state function),
- Strm (keystream function).
- Output functions: Two standard output functions are specified:
- Binary‑additive output function (commonly bitwise XOR),
- MULTI‑S01 output function.
- Keystream construction:
- Guidance for constructing keystream generators from block ciphers using standard block‑cipher modes (e.g., CTR, OFB, CFB).
- Dedicated keystream generators: Normative specifications for five named generators:
- MUGI, SNOW 2.0, Rabbit, Decim, KCipher‑2 (K2).
- Object Identifiers (Annex A): Assigned OIDs listed for dedicated generators; note that functional changes to an algorithm change its OID.
- Supporting material: Symbols/notation, finite field operations over GF(2^n) (Annex B), implementation examples (Annex C), and security information (Annex D).
- Normative references: Includes ISO/IEC 18033‑1 (General) and references to block‑cipher mode conventions per ISO/IEC 10116.
Practical applications and who uses this standard
ISO/IEC 18033‑4:2011 is intended for:
- Cryptographic library developers who implement standardized stream ciphers and need precise algorithm definitions and OIDs.
- Security architects and protocol designers selecting stream ciphers for real‑time or bit/byte‑oriented confidentiality (streaming media, VoIP, wireless links, IoT and constrained devices).
- Product vendors and integrators ensuring interoperable encryption implementations across platforms.
- Standards bodies, auditors, and evaluators who need canonical references for algorithm behavior, identifiers, and security considerations.
Practical use cases include real‑time data encryption, low‑latency communications, and scenarios where bitwise or block‑wise keystream operations are preferable to block ciphers.
Related standards
Keywords: ISO/IEC 18033‑4:2011, stream ciphers, keystream generator, MULTI‑S01, Binary‑additive, MUGI, SNOW 2.0, Rabbit, Decim, KCipher‑2, object identifiers, ISO/IEC 9834.
Open preview (PDF)Information technology — Security techniques — Encryption algorithms — Part 4: Stream ciphers