SOBER-128


SOBER-128 is a synchronous stream cipher designed by Hawkes and Rose and is a member of the SOBER family of ciphers. SOBER-128 was also designed to provide MAC functionality.
Watanabe and Furuya showed a weakness in the MAC generation of SOBER-128 which means an attack could forge a message with probability 2−6. MAC functionality was deleted by Qualcomm from SOBER-128 reference code.
SOBER-128 takes a key up to 128 bits in length.