Graph
FISH

🐟FISH

NEW

An experimental stream cipher built on lagged Fibonacci generators, primarily of historical interest.

DESCRIPTION

FISH is a stream cipher construction that derives keystream from lagged Fibonacci generators, aiming for fast software performance. Subsequent analysis identified weaknesses, motivating simplified successors such as PIKE to address security gaps. FISH is rarely, if ever, used in contemporary systems. It remains a historical example in the evolution of fast software stream ciphers and pseudo-random generation techniques.

ALTERNATIVE DEFINITIONS

Wikipedia

FISH is a stream cipher that uses lagged Fibonacci generators to produce a keystream and was proposed as a fast software cipher.

Emphasizes the lagged Fibonacci generator basis and software speed intent.

Source

University of Cambridge (Ross Anderson)

The PIKE design improves on FISH by simplifying its structure while avoiding some of the statistical weaknesses that affected FISH-like generators.

Places FISH in context as a predecessor with noted weaknesses.

Source

Stream Cipher Lagged Fibonacci Generator Pseudorandom Generator Fast Software Encryption Cryptanalysis RC4 ChaCha20 Salsa20 Keystream

COMPETING TERMS

PIKE

KNOWLEDGE AREAS

Data Security

TARGET AUDIENCE

Security Architect Cybersecurity Engineer Software Developer

EXTERNAL SOURCES

TOP QUESTIONS

What motivated the design of FISH?

FISH sought fast software encryption using lagged Fibonacci generators to produce keystream efficiently on general-purpose CPUs.

Category: Origin

Why isn’t FISH used today?

Cryptanalysis exposed weaknesses and newer designs like ChaCha20 or AES-based modes surpassed FISH in security and performance.

Category: Relevancy

PIKE was proposed as a simplified and more secure successor to FISH, addressing statistical weaknesses.

Category: Understanding

What is the key component underlying FISH?

Lagged Fibonacci generators, which are pseudorandom sequences formed by arithmetic recurrence relations with lags.

Category: Understanding

Is FISH standardized anywhere?

No. It remains a research-era design without adoption in modern standards or protocols.

Category: Status

What’s a modern alternative to FISH?

ChaCha20 provides strong security and high performance in software and is widely standardized and deployed.

Category: Alternatives

What lesson does FISH teach about cipher design?

Speed alone is insufficient; rigorous cryptanalysis and solid statistical properties are essential for security.

Category: BestPractices

Where can I learn about FISH’s weaknesses?

Research papers and discussions around PIKE and FSE conference proceedings describe attacks and limitations.

Category: Learning

Is FISH considered outdated?

Yes. It is of historical interest; modern systems use stronger, standardized algorithms.

Category: Relevancy