nisse@lysator.liu.se (Niels Möller) writes:
According to Eli's page and the AES submission paper, there is Serpent-0 and Serpent-1 and the paper discuss (page 22-23) that the key schedule has changed.
Do you think nettle's implementation is serpent-0, or is it just broken?
I don't know, I suspect it is serpent-0 but haven't confirmed it.
I updated the wikipedia article on this: http://en.wikipedia.org/wiki/Serpent_%28cipher%29
Hmm, I can't find any mention of serpent-0 there?
I see it, maybe there is some caching?
If you have a half-done port of libgrypt's serpent code, maybe you or I could finish it?
Sure! I suspect everything except the key schedule is working in my port. Should I try to make it compatible with libgcrypt, and presumably Serpent-1? Thus modifying serpent-test.c? I'll send a patch later.
/Simon