Skip to main content
Tool Factory

Cryptography & Ciphers

GOST Encryption

Apply GOST Encrypt with explicit key, format, and algorithm settings. Enter the data and key material, choose the parameters, then review the result.

Tool workspace

Your input stays in this browser.

Add the required input to continue.

Needs input

You can run the tool again after any change.

Options

Your result appears here

Apply GOST Encrypt with explicit key, format, and algorithm settings. Enter the data and key material, choose the parameters, then review the result.

This tool runs open-source code from CyberChef by GCHQ (Apache License 2.0). See open-source credits.

GOST Encryption uses GOST to process the supplied input. The operation returns GOST ciphertext, a signature, or a verification status for the selected mode. This record describes encryption or encoding for GOST Encryption.

The operation returns GOST ciphertext, a signature, or a verification status for the selected mode. This record describes encryption or encoding for GOST Encryption. Processing runs in the browser for this catalog category, so the result depends on the supplied bytes and settings. Processing runs in the browser.

GOST operations implement the selected algorithm; trust, key distribution, and certificate validation remain outside this tool.

Instructions

  1. Provide text or data for this tool.
  2. Use a public fixture key and message while testing. This applies to GOST Encryption.
  3. Keep byte order, key encoding, and algorithm parameters unchanged. This applies to GOST Encryption.
  4. For verification, provide the original message, public key, and complete signature. This applies to GOST Encryption.

Example

Input: Message "Test message" with a public 32-byte hexadecimal key and the documented algorithm option. Operation direction: encryption or encoding; algorithm: GOST Encryption.

Settings: GOST Encryption: Select the operation-specific key and input encoding fields. Use the listed GOST mode, hash, or signature parameters. Choose Text or Hex output to match the fixture format.

Result: The operation returns GOST ciphertext, a signature, or a verification status for the selected mode. This record describes encryption or encoding for GOST Encryption. Processing runs in the browser for this catalog category, so the result depends on the supplied bytes and settings.

Limits

  • GOST Encryption: A successful verification only covers the supplied message and public key.
  • GOST Encryption: Wrong byte order or encoding can produce an incompatible result.
  • GOST Encryption: The operation does not establish trust in a public key.

Questions

Which key settings does GOST encrypt require?

Match Algorithm, Key, and IV with the source. The older algorithm can also require the exact sBox selection.

Why does GOST output differ from another tool?

Match Block mode, Key meshing mode, and Padding. GOST 28147, Magma, and Kuznyechik labels do not describe one interchangeable wire format.

How should I copy GOST encrypt input and output?

Select the actual Input representation before running the operation. Choose Hex output when you need to preserve arbitrary bytes during copying. A readable result or a Complete label alone does not verify the message or its sender.