Editing Camellia (cipher) (section)

== Adoption ==
Support for Camellia was added to the final release of [[Mozilla Firefox]] 3 in 2008<ref name="firefox">{{Cite web | url=https://blog.mozilla.org/gen/2007/07/30/camellia-cipher-added-to-firefox/ | title=Camellia cipher added to Firefox | first=Gen | last=Kanai | work=[[Mozilla]] | date=July 30, 2007 | url-status=dead | archive-url=https://web.archive.org/web/20121221074122if_/http://blog.mozilla.org/gen/2007/07/30/camellia-cipher-added-to-firefox/ | archive-date=December 21, 2012 }}</ref> (disabled by default as of Firefox 33 in 2014<ref>{{cite web | title=Bug 1036765 – Disable cipher suites that are not in the "Browser Cipher Suite" proposal that are still enabled | url=https://bugzilla.mozilla.org/show_bug.cgi?id=1036765 | work=Mozilla | access-date=2015-01-09}}</ref> in spirit of the "Proposal to Change the Default TLS Ciphersuites Offered by Browsers",<ref>{{cite web | last=Smith | first=Brian | title=Proposal to Change the Default TLS Ciphersuites Offered by Browsers | url=https://briansmith.org/browser-ciphersuites-01 | work=Briansmith.org | date=8 August 2013 | access-date=2015-01-09}}</ref> and has been dropped from version 37 in 2015<ref>{{cite web | title=Bug 1037098 – Remove preferences for cipher suites disabled in bug 1036765 (Camellia and some 3DES & DSS cipher suites) | url=https://bugzilla.mozilla.org/show_bug.cgi?id=1037098 | work=Mozilla | access-date=2015-02-26}}</ref>). [[Pale Moon (web browser)|Pale Moon]], a fork of Mozilla/Firefox, continues to offer Camellia and had extended its support to include [[Galois/Counter Mode|Galois/Counter mode (GCM)]] suites with the cipher,<ref>{{cite web | url=https://forum.palemoon.org/viewtopic.php?f=1&t=10827&p=75697&hilit=camellia | title=Release notes for Pale Moon 26.0 | author=Moonchild | work=PaleMoon.org | date=January 26, 2016}}</ref> but has removed the GCM modes again with release 27.2.0, citing the apparent lack of interest in them.

Later in 2008, the [[FreeBSD]] Release Engineering Team announced that the cipher had also been included in the [[FreeBSD]] 6.4-RELEASE. Also, support for the Camellia cipher was added to the disk encryption storage class [[geli (software)|geli]] of FreeBSD by Yoshisato Yanagisawa.<ref>{{cite web | url=https://www.freebsd.org/cgi/man.cgi?query=geli&manpath=FreeBSD+9.0-RELEASE#end | title=FreeBSD System Manager's Manual: GELI(8) | work=FreeBSD.org | date=March 9, 2011}}</ref>

In September 2009, [[GNU Privacy Guard]] added support for Camellia in version 1.4.10.<ref>{{cite web | url=https://lists.gnupg.org/pipermail/gnupg-announce/2009q3/000291.html | title=GnuPG 1.4.10 released | work=GnuPG.org | date=September 2, 2009}}</ref>

[[VeraCrypt]] (a fork of [[TrueCrypt]]) included Camellia as one of its supported encryption algorithms.<ref>{{cite web |url=https://www.veracrypt.fr/en/Camellia.html |title=Camellia |work=VeraCrypt Documentation |publisher=IDRIX |access-date=2018-02-03}}</ref>

Moreover, various popular [[Library (computing)|security libraries]], such as [[Crypto++]], [[GnuTLS]], [[mbed TLS]] and [[OpenSSL]] also include support for Camellia.

[[Thales_Group|Thales]] and [[Bloombase]] support Camellia encryption cipher with their data cryptography offerings.<ref>{{cite web|url=https://info.isl.ntt.co.jp/crypt/eng/camellia/product.html#product_ov|title=Product Information (Oversea)|work=NTT Cryptographic Primitive }}</ref>

On March 26, 2013, Camellia was announced as having been selected again for adoption in Japan's new e-Government Recommended Ciphers List as the only 128-bit block cipher encryption algorithm developed in Japan. This coincides with the CRYPTREC list being updated for the first time in 10 years. The selection was based on Camellia's high reputation for ease of procurement, and security and performance features comparable to those of the Advanced Encryption Standard (AES). Camellia remains unbroken in its full implementation.<ref>{{cite web | url=https://www.mitsubishielectric.com/news/2013/0326-b_print.html | title=Camellia Encryption Algorithm Selected for New e-Government Recommended Ciphers List | work=MitsubishiElectric.com | date=March 26, 2013}}</ref> An impossible differential attack on 12-round Camellia without FL/FL<sup>−1</sup> layers does exist.<ref>{{cite journal | url=https://dl.acm.org/doi/10.1007/s11390-007-9056-0 | title=Impossible differential cryptanalysis of reduced-round ARIA and Camellia | date=May 3, 2007| doi=10.1007/s11390-007-9056-0 | last1=Wu | first1=Wen-Ling | last2=Zhang | first2=Wen-Tao | last3=Feng | first3=Deng-Guo | journal=Journal of Computer Science and Technology | volume=22 | issue=3 | pages=449–456 | s2cid=855434 }}</ref>