Information Security Stack Exchange is a question and answer site for information security professionals. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Can someone explain to me how safer 128's key schedule works? there are many parts that make no sense because they were not described at all in the paper (pages 3 and 5 in the pdf).

The second paragraph in part 2 is basically the same sentence 3 times. he doesnt describe how the subkeys are put together, as shown in the diagram on page 5. What does the horzonal bracket thing mean? for all i know, it is like a circuit diagram, and it is a jump of some sort. it seems to be neither add nor xor. so what is it?

also, the first bit rotation says Rotate Each Byte Right by 3 Bits, but the rest of them say Rotate Each Byte Left by 6 Bits. how does that allow for both halves to generate the same subkeys?

and yes, i know safer is not safe. im just doing this to learn how the different algorithms work

share|improve this question

Page 239 in that PDF has a Turbopascal program of Safer, including the key schedule. So I would start there (the author himself says

Appendix B contains a TURBO PASCAL program that implements encryption for the full r-round SAFER K-128 cipher. This program should be taken as the official definition of the SAFER K-128 encryption algorithm.

on page 214....)

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.