Graph
GOST

🪆GOST

NEW

Also known as: GOST 28147-89

A Soviet and Russian standard symmetric block cipher with 64-bit blocks and 256-bit keys, defined in GOST 28147-89.

DESCRIPTION

GOST 28147-89 is a symmetric block cipher standardized in the Soviet Union and Russia, using 64-bit blocks and 256-bit keys. It has appeared in Russian cryptographic suites and various protocol profiles via IETF specifications. While different S-box sets exist, the algorithm’s framework remains consistent. Modern Russian standards introduced successors (Magma and Kuznyechik) in GOST R 34.12-2015. Internationally, AES is more widely adopted; GOST persists in certain regional and compliance contexts. Implementations must choose vetted S-box parameters and use secure modes with authentication.

ALTERNATIVE DEFINITIONS

Wikipedia

GOST 28147-89 is a Soviet and Russian government standard symmetric-key block cipher with a 64-bit block size and a 256-bit key.

Provides canonical block and key sizes and origin.

Source

IETF

This document defines the use of the Russian cryptographic algorithms, including the symmetric block cipher GOST 28147-89, in the Cryptographic Message Syntax (CMS).

Positions GOST within IETF protocol usage rather than pure algorithmic definition.

Source

Magma (GOST R 34.12-2015) Kuznyechik (GOST R 34.12-2015) Symmetric Block Cipher Algorithms S-Box MAC RFC 4357 IPsec Protocol Suite TLS Key Schedule Cryptanalysis

COMPETING TERMS

Rijndael

KNOWLEDGE AREAS

Data Security Data Privacy & Compliance

TARGET AUDIENCE

Security Architect Cybersecurity Engineer Chief Information Security Officer Software Developer

EXTERNAL SOURCES

  • Wikipedia - GOST (block cipher)
  • IETF - Use of GOST 28147-89 in CMS
  • OpenSSL - OpenSSL GOST algorithm support
  • TC 26 - Russian technical committee for cryptographic standards

TOP QUESTIONS

Where is GOST 28147-89 used today?

It appears in Russian standards, some IETF profiles, and regional compliance contexts; globally, AES is more common.

Category: Usage

New Russian standards define successors like Magma and Kuznyechik; many deployments prefer AES unless GOST compliance is required.

Category: Relevancy

What are key parameters of GOST 28147-89?

It uses 64-bit blocks, a 256-bit key, and configurable S-boxes that influence security properties.

Category: Definition

Does GOST 28147-89 support authenticated encryption?

Not inherently. Combine with a MAC or use AEAD modes where standardized profiles exist.

Category: BestPractices

How does GOST compare to AES?

GOST is regionally standardized with configurable S-boxes, while AES is globally standardized with widespread hardware acceleration.

Category: Comparison

What risks exist when implementing GOST?

Using weak or nonstandard S-boxes, poor modes, or improper IVs can undermine security.

Category: Risks

What’s a competing term for GOST 28147-89?

AES is the globally dominant symmetric block cipher for new deployments.

Category: Alternatives

What successor standards relate to GOST 28147-89?

GOST R 34.12-2015 defines Magma and Kuznyechik as modern block cipher standards.

Category: History

How should legacy GOST systems be handled?

Maintain compatibility where required and plan migration paths to newer standards or AES, ensuring secure modes and key management.

Category: Management