- 12-round self-invertible cipher with 128-bit block size and key length up to 256 bits.
- Guaranteed security against existing attacks, such as differential and linear cryptanalysis.
- High performance in SW: 362 cycles on Pentium III/450MHz (about 150 Mbps).
- Fast key scheduling: much faster than one-block encryption.
- Efficiency in HW implementation: a Gbps range with low-cost gate array implementation.
- Completely royalty-free: it’s put in the public domain.
CRYPTON v1.0 (final version)
- Specification and Analysis (pdf): supporting documentation, last updated on June 8, 1999, recompiled to update address change on July July 28, 2001
- A Note on Implementing CRYPTON – Endian-Neutral Implementation – (pdf): supporting documentation, revised on July 30, 2001
- CRYPTON SEED/AES Randomness Test (hwp):
- A revised version of Crypton – Crypton v1.0 (pdf): FSE’99 Paper
- power-point presentation
- C / in-line assembly implementation (zip)