NEW
Also known as: GOST 28147-89
A Soviet and Russian standard symmetric block cipher with 64-bit blocks and 256-bit keys, defined in GOST 28147-89.
DESCRIPTION
GOST 28147-89 is a symmetric block cipher standardized in the Soviet Union and Russia, using 64-bit blocks and 256-bit keys. It has appeared in Russian cryptographic suites and various protocol profiles via IETF specifications. While different S-box sets exist, the algorithm’s framework remains consistent. Modern Russian standards introduced successors (Magma and Kuznyechik) in GOST R 34.12-2015. Internationally, AES is more widely adopted; GOST persists in certain regional and compliance contexts. Implementations must choose vetted S-box parameters and use secure modes with authentication.
ALTERNATIVE DEFINITIONS
Wikipedia
GOST 28147-89 is a Soviet and Russian government standard symmetric-key block cipher with a 64-bit block size and a 256-bit key.
Provides canonical block and key sizes and origin.
IETF
This document defines the use of the Russian cryptographic algorithms, including the symmetric block cipher GOST 28147-89, in the Cryptographic Message Syntax (CMS).
Positions GOST within IETF protocol usage rather than pure algorithmic definition.
RELATED TERMS
Magma (GOST R 34.12-2015) Kuznyechik (GOST R 34.12-2015) Symmetric Block Cipher Algorithms S-Box MAC RFC 4357 IPsec Protocol Suite TLS Key Schedule Cryptanalysis
COMPETING TERMS
KNOWLEDGE AREAS
Data Security Data Privacy & Compliance
TARGET AUDIENCE
Security Architect Cybersecurity Engineer Chief Information Security Officer Software Developer
EXTERNAL SOURCES
- Wikipedia - GOST (block cipher)
- IETF - Use of GOST 28147-89 in CMS
- OpenSSL - OpenSSL GOST algorithm support
- TC 26 - Russian technical committee for cryptographic standards
TOP QUESTIONS
Where is GOST 28147-89 used today?
It appears in Russian standards, some IETF profiles, and regional compliance contexts; globally, AES is more common.
Category: Usage
Is GOST 28147-89 still recommended?
New Russian standards define successors like Magma and Kuznyechik; many deployments prefer AES unless GOST compliance is required.
Category: Relevancy
What are key parameters of GOST 28147-89?
It uses 64-bit blocks, a 256-bit key, and configurable S-boxes that influence security properties.
Category: Definition
Does GOST 28147-89 support authenticated encryption?
Not inherently. Combine with a MAC or use AEAD modes where standardized profiles exist.
Category: BestPractices
How does GOST compare to AES?
GOST is regionally standardized with configurable S-boxes, while AES is globally standardized with widespread hardware acceleration.
Category: Comparison
What risks exist when implementing GOST?
Using weak or nonstandard S-boxes, poor modes, or improper IVs can undermine security.
Category: Risks
What’s a competing term for GOST 28147-89?
AES is the globally dominant symmetric block cipher for new deployments.
Category: Alternatives
What successor standards relate to GOST 28147-89?
GOST R 34.12-2015 defines Magma and Kuznyechik as modern block cipher standards.
Category: History
How should legacy GOST systems be handled?
Maintain compatibility where required and plan migration paths to newer standards or AES, ensuring secure modes and key management.
Category: Management