From: Jeff Barber <jeffb@sware.com>
Date: Fri, 11 Aug 95 06:33:20 PDT
To: mab@crypto.com (Matt Blaze)
Subject: Re: More "S-1" foolishness
In-Reply-To: <199508102043.QAA17280@crypto.com>
Message-ID: <9508111333.AA05740@wombat.sware.com>
MIME-Version: 1.0
Content-Type: text/plain


Matt Blaze writes:
> 
> Yesterday I mentioned that I'd noticed that "S-1" has a non-uniform
> distribution of F (Sbox?) outputs - some values appear far more often
> than others.  This means that some values are more likely to be XORed
> against the cleartext than others.  Needless to say, this is a very
> unusual (and presumably very bad) property - in DES, for example, the
> Sbox outputs are completely flat.

If it is Skipjack, that would sure explain why they didn't want to
release the source code, eh?  Maybe there was more than one "back door".


-- Jeff