Subject: [Cfrg] Vulgarized explanations on the Russian S-box

From: Leo Perrin <[email-masked]>
Date: Sun, 24 Mar 2019 10:54:09 +0100 (CET)

Dear members, 

I have written detailed and (I hope) vulgarized explanations of my results on the Russian S-box which is used in RFC 6986 and RFC 7801. I provide some more information about the claims of the designers (in particular that they claim to have lost their generation algorithm...) and then argue that, until the designers of these algorithms clarify their design process, neither Kuznyechik nor Streebog should be used. 

Here is the link: https://who.paris.inria.fr/Leo.Perrin/pi.html 

Best regards, 

/Léo