Block cipher

How block ciphers operate

At its core a block cipher implements an invertible transformation that depends on a key. During encryption the algorithm takes a block of plaintext of fixed length (common sizes are 64 or 128 bits) and produces a ciphertext block of the same size. Decryption applies the inverse transformation using the same secret key to recover the original plaintext block. The key itself is supplied by the user or protocol and is handled by a key schedule that derives round keys used inside the cipher. Because block ciphers by themselves only operate on one block at a time, they are typically combined with modes of operation to encrypt messages of arbitrary length.

Design patterns and examples

Two widely used internal structures for block ciphers are the Feistel network and the substitution–permutation network (SPN). The Feistel design divides a block into halves and applies round functions in a manner that makes the overall mapping invertible regardless of whether the round function itself is invertible; the Data Encryption Standard is a famous example built as a Feistel cipher. The SPN approach repeatedly applies layers of nonlinear substitutions and linear mixing; the Advanced Encryption Standard uses an SPN construction.

• Feistel network: used by ciphers such as DES, historically influential and simple to invert.
• Substitution–permutation network: used by AES, supports high diffusion and strong algebraic structure.
• Key schedule: internal component that expands the user key into per-round keys.

Modes of operation

Because block ciphers transform fixed-size blocks, practical encryption of longer or variable-length messages requires a mode of operation. Modes determine how blocks are linked and whether the result provides confidentiality, integrity, or both. Common modes include:

• ECB (Electronic Codebook): the simplest mode; encrypting identical plaintext blocks yields identical ciphertext blocks and is generally discouraged for most applications.
• CBC (Cipher Block Chaining): chains blocks together using an initialization vector (IV) to ensure differing outputs for identical messages; commonly used historically for file and disk encryption.
• CTR (Counter): turns a block cipher into a stream cipher by encrypting successive counter values; allows parallel processing and random access.
• AEAD modes (e.g., GCM): provide authenticated encryption with associated data, combining confidentiality and integrity checks in one construct.

History and standardization

Early practical block ciphers were developed in the 1970s. The Data Encryption Standard (DES) was produced at IBM and standardized in 1977; it popularized the Feistel structure and block-based encryption in industry. As computing power advanced, DES's 56-bit key was no longer sufficient, and research led to the development and adoption of the Advanced Encryption Standard (AES) in 2001, which remains widely used today.

Security considerations and attacks

Block cipher security depends on design quality and key length. Well-designed ciphers resist known attacks such as differential and linear cryptanalysis, which exploit statistical properties of the cipher's round functions. Practical threats include brute-force key search (mitigated by longer keys), poor key management, reuse of IVs where inappropriate, and incorrect use of modes. Some constructions also exhibit weak keys or related-key vulnerabilities if the key schedule is flawed.

Uses, importance, and distinctions

Block ciphers are used in many cryptographic applications: secure communication protocols, disk and file encryption, virtual private networks, and secure storage. They are distinct from stream ciphers (which encrypt data one bit or byte at a time) but can be used in stream-like ways when combined with certain modes (for example, CTR). Modern practice often prefers authenticated encryption modes to avoid common pitfalls where confidentiality is provided without integrity.

For further technical references and standards, including algorithm specifications and recommended modes, consult authoritative sources in applied cryptography and standards documents provided by relevant national and international organizations. Additional introductory materials are available from general cryptography overviews and standardization bodies: symmetric-key cryptography, cryptography resources, and algorithm-specific material such as the original DES and AES documentation linked above.