Square (block cipher)

Square is a 1997 substitution–permutation block cipher that influenced the Rijndael design (AES). It introduced the integral or "Square" attack and uses 128-bit block and key sizes.

Overview

Square is a symmetric-key block cipher developed in the late 1990s for use in modern cryptography. It implements a classic block cipher structure and served mainly as an experimental design that helped shape later algorithms. The authors published the original paper describing the cipher and its security properties; the work emphasized a clean, analyzable construction and clear criteria for diffusion and confusion.

Design and components

The core design of Square was produced by researchers including Joan Daemen and Vincent Rijmen. Square is built as a substitution–permutation network (SPN) that alternates non-linear substitution layers with linear diffusion layers and key additions. Its main building blocks are an 8-bit S-box, a byte-level linear mixing step akin to MixColumns, and a simple key schedule tailored to the cipher's 128-bit state.

Parameters and operation

Square operates on a 128-bit block and uses a 128-bit key; these sizes are typical of modern block ciphers and match later designs such as Rijndael. The algorithm runs for eight rounds, each consisting of substitution, permutation/diffusion and round-key XOR operations. Designers chose the number of rounds to balance efficiency and resistance against the available cryptanalytic methods at the time.

History and influence

The cipher was published in 1997 and acted as a direct predecessor and source of ideas for Rijndael, the algorithm later selected as the Advanced Encryption Standard in 2001 by the U.S. government. Concepts tested in Square—S-box design, byte-oriented diffusion and an emphasis on analytical clarity—helped inform Rijndael's development and evaluation.

Cryptanalysis: the Square attack

Square is notable for the cryptanalytic technique that accompanied its release. Lars Knudsen described what became known as the Square attack, an early form of integral cryptanalysis. This method inspects how sets of plaintexts with specific structures propagate through the cipher and can distinguish reduced-round versions of Square from a random permutation. The technique influenced later analyses of many SPN ciphers and contributed to the development of more robust round counts in successor designs.

Characteristics and notable facts

Structure: substitution–permutation network.
Block size: 128-bit; Key size: 128-bit.
Rounds: eight rounds in the published specification.
Influence: precursor to Rijndael and modern AES-like constructions.
Legal status: the reference design is reported as not patented, facilitating academic use and study.

Today Square is mainly of historical and pedagogical interest: it is studied as an instructive example of SPN design and as the origin point for integral cryptanalysis. Implementations are uncommon in practical systems, but its ideas live on in AES-family ciphers and in the body of public cryptanalysis literature.