Editing WAKE (cipher) (section)

== Characteristics and vulnerability ==
WAKE is noted for its speed, making it suitable for applications requiring fast [[encryption]]. However, it has been found to be vulnerable to both chosen plaintext and chosen [[ciphertext]] attacks. These vulnerabilities arise from the cipher's reliance on previous ciphertext blocks for [[keystream]] generation, which can be exploited in certain attack scenarios.<ref name=":0">{{Cite web |title=WAKE (cipher) {{!}} Semantic Scholar |url=https://www.semanticscholar.org/topic/WAKE-(cipher)/697868 |access-date=2024-07-19 |website=www.semanticscholar.org |language=en}}</ref>

Research has indicated that WAKE's design allows for effective chosen plaintext attacks, where an attacker can choose arbitrary plaintexts to be encrypted and analyze the resulting ciphertexts to gain insights into the key or the encryption process. Similarly, chosen ciphertext attacks can also be executed, where an attacker can manipulate ciphertexts and observe the corresponding plaintext outputs.<ref name=":0" />