Rambutan (cryptography)

Rambutan is a family of encryption technologies designed by the Communications-Electronics Security Group (CESG), the technical division of the United Kingdom government's secret communications agency, GCHQ.

It includes a range of encryption products designed by CESG for use in handling confidential (not secret) communications between parts of the British government, government agencies, and related bodies such as NHS Trusts. Unlike CESG's Red Pike system, Rambutan is not available as software: it is distributed only as a self-contained electronic device (an ASIC) which implements the entire cryptosystem and handles the related key distribution and storage tasks.[1] Rambutan is not sold outside the government sector.[2]

Technical details of the Rambutan algorithm are secret. Security researcher Bruce Schneier describes it as being a stream cipher (linear feedback shift register) based cryptosystem with 5 shift registers each of around 80 bits, and a key size of 112 bits.[2] RAMBUTAN-I communications chips (which implement a secure X.25 based communications system) are made by approved contractors Racal and Baltimore Technologies/Zergo Ltd.[3][4] CESG later specified RAMBUTAN-II, an enhanced system with backward compatibility with existing RAMBUTAN-I infrastructure.[5] The RAMBUTAN-II chip is a 64-pin quad ceramic pack chip, which implements the electronic codebook, cipher block chaining, and output feedback operating modes (each in 64 bits) and the cipher feedback mode in 1 or 8 bits.[6] Schneier suggests that these modes may indicate Rambutan is a block cipher rather than a stream.[2] The three 64 bit modes operate at 88 megabits/second.[6]

References

  1. ↑ "The use of encryption and related services with the NHSnet", report by Zergo Ltd., mirrored on Cryptome
  2. ↑ 2.0 2.1 2.2 Schneier, Bruce Applied Cryptography (2nd ed), John Wiley & Sons, 1996
  3. ↑ Racal Rambutan SAFE X25 and Rambutan SAFE 2M product descriptions
  4. ↑ Baltimore Technologies (UK) approved Rambutan devices
  5. ↑ "RAMBUTAN-II", CESG website, URL retrieved 17 December 2006
  6. ↑ 6.0 6.1 "RAMBUTAN II cryptographic chip", CESG brochure (PDF)