Key Filtering in Cube Attacks from the Implementation Aspect - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2023

Key Filtering in Cube Attacks from the Implementation Aspect

Résumé

In cube attacks, key filtering is a basic step of identifying the correct key candidates by referring to the truth tables of superpolies. When terms of superpolies get massive, the truth table lookup complexity of key filtering increases significantly. In this paper, we propose the concept of implementation dependency dividing all cube attacks into two categories: implementation dependent and implementation independent. The implementation dependent cube attacks can only be feasible when the assumption that one encryption oracle query is more complicated than one table lookup holds. On the contrary, implementation independent cube attacks remain feasible in the extreme case where encryption oracles are implemented in the full codebook manner making one encryption query equivalent to one table lookup. From this point of view, we scrutinize existing cube attack results of stream ciphers TRIVIUM, Grain-128AEAD, ACORN and KREYVIUM. As a result, many of them turn out to be implementation dependent. Combining with the degree evaluation and divide-and-conquer techniques used for superpoly recovery, we further propose new cube attack results on KREYVIUM reduced to 898, 899 and 900 rounds. Such new results not only mount to the maximal number of rounds so far but also are implementation independent.
Fichier non déposé

Dates et versions

hal-04282347 , version 1 (13-11-2023)

Identifiants

Citer

Hao Fan, Yonglin Hao, Qingju Wang, Xinxin Gong, Lin Jiao. Key Filtering in Cube Attacks from the Implementation Aspect. International Conference on Cryptology and Network Security - CANS 2023, Oct 2023, Augusta, GA, United States. pp.293-317, ⟨10.1007/978-981-99-7563-1_14⟩. ⟨hal-04282347⟩
16 Consultations
0 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More