T-Class ciphers

SOBER has been extended to 16- and 32- bit wide architectures,
and optimised in strength against the "Guess and Determine"
attacks.  (asiacrypt.pdf is our Asiacrypt 2000 paper on the
subject of these attacks.)  The resulting ciphers are called
the T-Class ciphers, t8, t16 and t32 respectively. t8 is about
the same as SOBER. t16 is about twice as fast as SOBER on a
16-bit machine, and about the same speed as RC4.  t32 is about
50% faster than t16 on a 32-bit machine. Memory usage is
significantly smaller than RC4, and key setup is much quicker.
t16 and t32 have been submitted to the NESSIE project for
standardisation in Europe. 

The T-Class cipher homepage is located at:

	http://www.qualcomm.com.au/T-Class.html