The SAFER K-64 encryption algorithm has been compromised through a real-world, practical, low-cost attack. Using consumer-grade hardware, the SAFER K-64 key schedule is vulnerable to a related-key chosen plaintext attack. By comparing enough plaintext data that is matched to its corresponding cipher text, the encryption keys can be derived through cryptanalysis. Such an attack could potentially compromise the entire encryption scheme, giving the attacker access to sensitive data.

Due to the encryption algorithm being compromised through cryptanalysis, it is generally accepted that it should no longer be used. It is recommended that an alternate, stronger algorithm be used to ensure data is properly protected.

• Other Advisory URL: http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.43.5515
  http://www.schneier.com/paper-key-schedule.pdf
• Generic Informational URL: http://en.wikipedia.org/wiki/Chosen-plaintext_attack
  http://en.wikipedia.org/wiki/SAFER

• John Kesley - Counterpane Systems
• Bruce Schneier - Counterpane Systems
• David Wagner - UC Berkeley

NVD does not currently have a CVSSv2 score assigned.