NEW
Also known as: Block Cipher
A class of ciphers that encrypt data in fixed-size blocks using a shared secret key.
DESCRIPTION
Symmetric block ciphers transform fixed-size blocks (e.g., 128 bits) using a secret key through multiple rounds of substitution, permutation, and key mixing. Designs include substitution–permutation networks (e.g., AES) and Feistel structures (e.g., DES). Security relies on round function strength, key schedule, and sufficient rounds. Block ciphers operate securely with modes of operation for arbitrary-length data (e.g., CBC, CTR, GCM). They are widely used for confidentiality and, in AEAD modes, authenticated encryption.
ALTERNATIVE DEFINITIONS
Wikipedia
A block cipher is a deterministic algorithm that operates on fixed-length groups of bits, called blocks, with an unvarying transformation that is specified by a symmetric key.
Highlights determinism, fixed blocks, and symmetric key control.
NIST
This recommendation specifies five confidentiality modes of operation for symmetric key block ciphers.
Frames block ciphers as primitives used with defined modes of operation.
RELATED TERMS
S-Box S-Box Design The Feistel Function Substitution Transposition Stream Cipher Rijndael Data Encryption Standard Substitution–Permutation Network Cipher Mode of Operation
COMPETING TERMS
Stream Cipher Algorithms
RELATIONS
KNOWLEDGE AREAS
Data Security Software Engineering Mathematics
TARGET AUDIENCE
Security Architect Cybersecurity Engineer Software Developer Chief Information Security Officer
EXTERNAL SOURCES
- Wikipedia - Block cipher
- NIST - Modes of operation for block ciphers.
- NIST - AES standard as a modern block cipher.
- IETF - AEAD with block ciphers (e.g., GCM).
- Cloudflare - Vendor overview of block ciphers.
TOP QUESTIONS
What defines a Symmetric Block Cipher Algorithm?
It processes fixed-size blocks under a shared key, applying multiple rounds of substitution, permutation, and key mixing.
Category: Definition
How do block ciphers differ from stream ciphers?
Block ciphers operate on fixed-size blocks with modes adapting to streams; stream ciphers combine a keystream per bit/byte with plaintext.
Category: Comparison
Why are modes of operation necessary?
Modes like CBC, CTR, and GCM securely extend block ciphers to arbitrary-length data and can provide integrity (AEAD).
Category: Concept
What makes a block cipher secure?
Strong nonlinear components, sufficient rounds, robust key schedule, and resistance to differential and linear cryptanalysis.
Category: Requirements
What are common mistakes using block ciphers?
Reusing IVs/nonces in CTR/GCM, using ECB mode, and weak key management undermine security.
Category: Mistakes
Is AES a Symmetric Block Cipher Algorithm?
Yes. AES is a 128-bit block cipher with key sizes of 128/192/256 bits, specified by NIST.
Category: Example
What is the risk of ECB mode?
ECB leaks patterns since identical plaintext blocks produce identical ciphertext blocks. Avoid it for confidentiality.
Category: Risk
How do Feistel networks relate to block ciphers?
Feistel structures build invertible block ciphers from round functions; DES is a classic example.
Category: Concept
Where should I start learning about block ciphers?
Study AES (FIPS-197), NIST SP 800-38A modes, and practical AEAD like GCM.
Category: Getting Started