Practical Seed-Recovery of Fast Cryptographic Pseudo-Random Number Generators - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2022

Practical Seed-Recovery of Fast Cryptographic Pseudo-Random Number Generators

Florette Martinez
  • Fonction : Auteur
  • PersonId : 1071898
  • IdRef : 272105961

Résumé

Trifork is a family of pseudo-random number generators described in 2010 by Orue et al. It is based on Lagged Fibonacci Generators and has been claimed as cryptographically secure. In 2017 was presented a new family of lightweight pseudo-random number generators: Arrow. These generators are based on the same techniques as Trifork and designed to be light, fast and secure, so they can allow private communication between resource-constrained devices. The authors based their choices of parameters on NIST standards on lightweight cryptography and claimed these pseudo-random number generators were of cryptographic strength. We present practical implemented algorithms that reconstruct the internal states of the Arrow generators for different parameters given in the original article. These algorithms enable us to predict all the following outputs and recover the seed. These attacks are all based on a simple guess-and-determine approach which is efficient enough against these generators. We also present an implemented attack on Trifork, this time using latticebased techniques. We show it cannot have more than 64 bits of security, hence it is not cryptographically secure.
Fichier principal
Vignette du fichier
article_eprint.pdf (136.35 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-03737677 , version 1 (25-07-2022)

Identifiants

Citer

Florette Martinez. Practical Seed-Recovery of Fast Cryptographic Pseudo-Random Number Generators. 20th International Conference on Applied Cryptography and Network Security, ACNS 2022, Jun 2022, Rome, Italy. pp.212-229, ⟨10.1007/978-3-031-09234-3_11⟩. ⟨hal-03737677⟩
17 Consultations
14 Téléchargements

Altmetric

Partager

Gmail Mastodon Facebook X LinkedIn More