SOBER has been extended to 16- and 32- bit wide architectures, and optimised in strength against the "Guess and Determine" attacks. (asiacrypt.pdf is our Asiacrypt 2000 paper on the subject of these attacks.) The resulting ciphers are called the T-Class ciphers, t8, t16 and t32 respectively. t8 is about the same as SOBER. t16 is about twice as fast as SOBER on a 16-bit machine, and about the same speed as RC4. t32 is about 50% faster than t16 on a 32-bit machine. Memory usage is significantly smaller than RC4, and key setup is much quicker. t16 and t32 have been submitted to the NESSIE project for standardisation in Europe.

• t8.tgz (full source code of t8 for reference and optimised implementation, including test harness)
• t16.tgz (full source code of t16 for reference and optimised implementation, including test harness)
• t32.tgz (full source code of t32 for reference and optimised implementation, including test harness)
• TC.pdf (30pp.) (design paper about the T-class ciphers in PDF)