Editing RC4 (section)

===Spritz===

In 2014, Ronald Rivest gave a talk and co-wrote a paper<ref name="Rivest2014">{{cite news |last1=Rivest |first1=Ron |last2=Schuldt |first2=Jacob |date=27 October 2014 |title=Spritz – a spongy RC4-like stream cipher and hash function |url=http://people.csail.mit.edu/rivest/pubs/RS14.pdf |access-date=26 October 2014}}</ref> on an updated redesign called Spritz. A hardware accelerator of Spritz was published in Secrypt, 2016<ref>{{cite web | title=Hardware Accelerator for Stream Cipher Spritz | url=https://blogs.ntu.edu.sg/debjyoti001/files/2016/07/paper-1rf0pxd.pdf | publisher=Secrypt 2016 | access-date=29 July 2016 |author1=Debjyoti Bhattacharjee  |author2=Anupam Chattopadhyay}}</ref> and shows that due to multiple nested calls required to produce output bytes, Spritz performs rather slowly compared to other hash functions such as SHA-3 and the best known hardware implementation of RC4.

Like other [[sponge function]]s, Spritz can be used to build a cryptographic hash function, a deterministic random bit generator ([[DRBG]]), an encryption algorithm that supports [[authenticated encryption]] with associated data (AEAD), etc.<ref name="Rivest2014"/>

In 2016, Banik and Isobe proposed an attack that can distinguish Spritz from random noise.<ref>{{Cite book|last1=Banik|first1=Subhadeep|last2=Isobe|first2=Takanori|title=Fast Software Encryption |chapter=Cryptanalysis of the Full Spritz Stream Cipher |date=2016-03-20|publisher=Springer Berlin Heidelberg|isbn=9783662529928|editor-last=Peyrin|editor-first=Thomas|series=Lecture Notes in Computer Science|volume=9783 |pages=63–77|language=en|doi=10.1007/978-3-662-52993-5_4|s2cid=16296315}}</ref> In 2017, Banik, Isobe, and Morii proprosed a simple fix that removes the distinguisher in the first two keystream bytes, requiring only one additional memory access without diminishing software performance substantially.<ref>{{Cite journal|last1=Banik|first1=Subhadeep|last2=Isobe|first2=Takanori|last3=Morii|first3=Masakatu|date=2017-06-01|title=Analysis and Improvements of the Full Spritz Stream Cipher|url=https://www.jstage.jst.go.jp/article/transfun/E100.A/6/E100.A_1296/_article|journal=IEICE Transactions on Fundamentals of Electronics, Communications and Computer Sciences|volume=E100.A|issue=6|pages=1296–1305|doi=10.1587/transfun.E100.A.1296|bibcode=2017IEITF.100.1296B |hdl=10356/81487|hdl-access=free}}</ref>