Template:Infobox block cipher SMS4 is a block cipher used in the Chinese National Standard for Wireless LAN WAPI (Wired Authentication and Privacy Infrastructure).

SMS4 was a proposed cipher to be used in IEEE 802.11i standard, but has so far been rejected by ISO. One of the reasons for the rejection has been opposition to the WAPI fast-track proposal by the IEEE.

The SMS4 algorithm was invented by Prof. LU Shu-wang(吕述望). The algorithm was declassified in January, 2006. A few details of the SMS4 cipher are:

  • It has a block size of 128 bits.
  • Uses an 8-bit S-box
  • The key size is 128 bits.
  • The only operations used are XOR, circular shifts and S-Box applications
  • Performs 32 rounds to process one block.
  • Each round updates a quarter (32 bits) of the internal state.
  • A non-linear key schedule is used to produce the round keys.
  • Decryption is using the same keys as encryption, but in reversed order.

Terms and DefinitionsEdit

Word and ByteEdit

Define Z^e_2 as a vector set of e bits.

Z^{32}_2 is a word.

Z^8_2 is a byte.


S-box is fixed for 8-bit input and 8-bit output, noted as Sbox().

Keys and Key ParametersEdit

The length of encryption keys are 128-bit, represented as MK=(MK_0,\ MK_1,\ MK_2,\ MK_3), in which MK_i\ (i=0,\ 1,\ 2,\ 3) is a word.

A round key is represented as (rk_0,\ rk_1,\ \ldots,\ rk_{31}). It is generated by the encryption key.

FK=(FK_0,\ FK_1,\ FK_2,\ FK_3) is a system parameter.

CK=(CK_0,\ CK_1,\ \ldots,\ CK_{31}) is a fixed parameter.

FK_i and CK_i are words, used for extension of the algorithm.

External linksEdit

Ad blocker interference detected!

Wikia is a free-to-use site that makes money from advertising. We have a modified experience for viewers using ad blockers

Wikia is not accessible if you’ve made further modifications. Remove the custom ad blocker rule(s) and the page will load as expected.