Cryptanalysis of WG-8 and WG-16 stream ciphers

Rostami, Saeed; Shakour, Elham; Orumiehchiha, Mohammad Ali; Pieprzyk, Josef

doi:10.1007/s12095-018-0298-1

Cited by 5 publications

(4 citation statements)

References 9 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…A distinguishing attack was proposed against the WG-7 stream cipher in [OPS12], which was successful due to a small number of tap positions in the characteristic polynomial of the LFSR of WG-7. Applying a similar distinguishing attack of [RSOP19,OPS12], a distinguisher of WG-PRBG can be written as…”

Section: Discussionmentioning

confidence: 99%

“…For the distinguisher F , the probability of F (x) = 0 can be written as Pr(F (x) = 0) = 1 2 ± for some . Using the counting algorithm in [RSOP19], the value of is 2 −20.405 . Therefore, the time and data complexities of the distinguishing attack is O(2 40.81 ) for distinguishing the outputs of WG-PRBG from a truly random one.…”

Section: Discussionmentioning

confidence: 99%

“…We analyze the security of WG-PRBG against stream cipher based attacks, namely algebraic attack [Cou03], correlation attack [Sie85,MS89,CJS01], discrete fourier transform (DFT) attack [GRHH11], distinguishing attack [RSOP19], time-memory-data tradeoff attack [BS00], and an attack by Rønjon [Røn17]. We present a summary on the time complexity and data complexity of building distinguishers or seed recovery techniques based on these attacks in Table 8.…”

Section: Security Of Wg-prbgmentioning

confidence: 99%

See 2 more Smart Citations

WAGE: An Authenticated Encryption with a Twist

AlTawy

Gong

Mandal

et al. 2020

ToSC

View full text Add to dashboard Cite

This paper presents WAGE, a new lightweight sponge-based authenticated cipher whose underlying permutation is based on a 37-stage Galois NLFSR over F27. At its core, the round function of the permutation consists of the well-analyzed Welch-Gong permutation (WGP), primitive feedback polynomial, a newly designed 7-bit SB sbox and partial word-wise XORs. The construction of the permutation is carried out such that the design of individual components is highly coupled with cryptanalysis and hardware efficiency. As such, we analyze the security of WAGE against differential, linear, algebraic and meet/miss-in-the-middle attacks. For 128-bit authenticated encryption security, WAGE achieves a throughput of 535 Mbps with hardware area of 2540 GE in ASIC ST Micro 90 nm standard cell library. Additionally, WAGE is designed with a twist where its underlying permutation can be efficiently turned into a pseudorandom bit generator based on the WG transformation (WG-PRBG) whose output bits have theoretically proved randomness properties.

show abstract

Section: Discussionmentioning

confidence: 99%

Section: Discussionmentioning

confidence: 99%

Section: Security Of Wg-prbgmentioning

confidence: 99%

See 1 more Smart Citation

WAGE: An Authenticated Encryption with a Twist

AlTawy

Gong

Mandal

et al. 2020

ToSC

View full text Add to dashboard Cite

show abstract

“…It was submitted to the NIST lightweight cryptography standardization competition [12] and became one of 32 Round 2 candidates of this competition. Due to the novelty in design, the WG family of stream ciphers has attracted a lot of attention in recent years, and several attacks on them have been proposed in [13] , [14] , [15] , [16] , [17] , [18] , [19] .…”

Section: Introductionmentioning

confidence: 99%

A practical key recovery attack on the lightweight WG-5 stream cipher

Ding,

Liao,

et al. 2024

Heliyon

View full text Add to dashboard Cite

The welch-gong stream cipher - evolutionary path

Zidarič,

Mandal,

Gong

et al. 2023

Cryptogr. Commun.

View full text Add to dashboard Cite

This survey presents the rich history of the Welch-Gong (WG) Stream cipher family. It has been a long journey that lead the WG stream ciphers to become practical. The evolutionary path is a combination of mathematical endeavour and engineering striving to transfer pure mathematical functions to practical encryption algorithms for various applications. This path began as the pioneering work on WG transformation sequences with 2-level autocorrelation, leading to important breakthroughs in the early 2000’s, such as the submission of the first WG stream cipher to the eSTREAM competition in 2005 and the subsequent introduction of the WG stream cipher family WG(m, l), followed by extensive work on particular instances proposed for various (mostly lightweight) applications. A recent construction using a WG permutation is the authenticated encryption WAGE, submitted to the NIST LWC competition in 2019. The story of the WG stream cipher is by far not finished. The future opens numerous possibilities for WG stream ciphers and WAGE, with applications in both lightweight environments and in high-performance computing. We conclude the survey with new ideas and open problems.

show abstract

Cryptanalysis of WG-8 and WG-16 stream ciphers

Cited by 5 publications

References 9 publications

WAGE: An Authenticated Encryption with a Twist

WAGE: An Authenticated Encryption with a Twist

A practical key recovery attack on the lightweight WG-5 stream cipher

The welch-gong stream cipher - evolutionary path

Contact Info

Product

Resources

About