NEW
An experimental stream cipher built on lagged Fibonacci generators, primarily of historical interest.
DESCRIPTION
FISH is a stream cipher construction that derives keystream from lagged Fibonacci generators, aiming for fast software performance. Subsequent analysis identified weaknesses, motivating simplified successors such as PIKE to address security gaps. FISH is rarely, if ever, used in contemporary systems. It remains a historical example in the evolution of fast software stream ciphers and pseudo-random generation techniques.
ALTERNATIVE DEFINITIONS
Wikipedia
FISH is a stream cipher that uses lagged Fibonacci generators to produce a keystream and was proposed as a fast software cipher.
Emphasizes the lagged Fibonacci generator basis and software speed intent.
University of Cambridge (Ross Anderson)
The PIKE design improves on FISH by simplifying its structure while avoiding some of the statistical weaknesses that affected FISH-like generators.
Places FISH in context as a predecessor with noted weaknesses.
RELATED TERMS
Stream Cipher Lagged Fibonacci Generator Pseudorandom Generator Fast Software Encryption Cryptanalysis RC4 ChaCha20 Salsa20 Keystream
COMPETING TERMS
PIKE
KNOWLEDGE AREAS
TARGET AUDIENCE
Security Architect Cybersecurity Engineer Software Developer
EXTERNAL SOURCES
- Wikipedia - FISH (cipher)
- Ross Anderson (University of Cambridge) - Research context for FISH/PIKE
- Wikipedia - Overview of FISH cipher
TOP QUESTIONS
What motivated the design of FISH?
FISH sought fast software encryption using lagged Fibonacci generators to produce keystream efficiently on general-purpose CPUs.
Category: Origin
Why isn’t FISH used today?
Cryptanalysis exposed weaknesses and newer designs like ChaCha20 or AES-based modes surpassed FISH in security and performance.
Category: Relevancy
How is FISH related to PIKE?
PIKE was proposed as a simplified and more secure successor to FISH, addressing statistical weaknesses.
Category: Understanding
What is the key component underlying FISH?
Lagged Fibonacci generators, which are pseudorandom sequences formed by arithmetic recurrence relations with lags.
Category: Understanding
Is FISH standardized anywhere?
No. It remains a research-era design without adoption in modern standards or protocols.
Category: Status
What’s a modern alternative to FISH?
ChaCha20 provides strong security and high performance in software and is widely standardized and deployed.
Category: Alternatives
What lesson does FISH teach about cipher design?
Speed alone is insufficient; rigorous cryptanalysis and solid statistical properties are essential for security.
Category: BestPractices
Where can I learn about FISH’s weaknesses?
Research papers and discussions around PIKE and FSE conference proceedings describe attacks and limitations.
Category: Learning
Is FISH considered outdated?
Yes. It is of historical interest; modern systems use stronger, standardized algorithms.
Category: Relevancy