MixColumns Coefficient Property and Security of the AES with A Secret S-Box

An, Xin; Hu, Kai; Wang, Meiqin

doi:10.1007/978-3-030-51938-4_6

Cited by 3 publications

(1 citation statement)

References 15 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Moreover, security of AES with a single secret S-box has been studied, for instance, in refs. [28][29][30][31][32][33][34][35]. From these works, sophisticated attacks on SPNbox, whose structure is similar to the secret AES, can be obtained.…”

Section: Introductionmentioning

confidence: 99%

Improved integral cryptanalysis of SPNbox in digital rights management systems

Liu

Wang

et al. 2022

IET Information Security

View full text Add to dashboard Cite

As an access control technology of digital material, digital rights management systems have a profound effect on the copyright protection of digital content. To address the threat of key exposure, applying white‐box ciphers is effective to provide a security guarantee for digital rights management systems. SPNbox, proposed at Asiacrypt’16 is such a white‐box cipher that fulfils comprehensive resistance against key exposure for digital rights management systems, including black‐box security on the server‐side and white‐box security on the client‐side. So far, the previous integral cryptanalysis of SPNbox employs a general 2‐round distinguisher without considering the details of SPNbox. The properties of SPNbox are carefully explored and a novel 2‐round integral distinguisher is introduced. On this basis, we propose new competitive 3‐round key recovery attacks with lower complexities. Particularly, the improved attack on 3‐round SPNbox‐32 only requires 232 chosen plaintexts, whereas the current best attack necessitates 262 chosen plaintexts. In addition, integral attacks on 4‐ and 5‐round SPNbox‐8 are presented for the first time. Thus, the security margin of SPNbox‐8 is narrowed by two rounds. These results indicate that the capability of SPNbox resisting integral cryptanalysis is inferior to the designers' claim.

show abstract

Section: Introductionmentioning

confidence: 99%

Improved integral cryptanalysis of SPNbox in digital rights management systems

Liu

Wang

et al. 2022

IET Information Security

View full text Add to dashboard Cite

show abstract

The Retracing Boomerang Attack, with Application to Reduced-Round AES

Dunkelman,

Keller,

Ronen

et al. 2024

J Cryptol

View full text Add to dashboard Cite

Boomerang attacks are extensions of differential attacks that make it possible to combine two unrelated differential properties of the first and second part of a cryptosystem with probabilities p and q into a new differential-like property of the whole cryptosystem with probability $$p^2q^2$$ p 2 q 2 (since each one of the properties has to be satisfied twice). In this paper, we describe a new version of boomerang attacks which uses the counterintuitive idea of throwing out most of the data in order to force equalities between certain values on the ciphertext side. In certain cases, this creates a correlation between the four probabilistic events, which increases the probability of the combined property to $$p^2q$$ p 2 q and increases the signal-to-noise ratio of the resultant distinguisher. We call this variant a retracing boomerang attack since we make sure that the boomerang we throw follows the same path on its forward and backward directions. To demonstrate the power of the new technique, we apply it to the case of 5-round AES. This version of AES was repeatedly attacked by a large variety of techniques, but for twenty years its complexity had remained stuck at $$2^{32}$$ 2 32 . At Crypto’18, it was finally reduced to $$2^{24}$$ 2 24 (for full key recovery), and with our new technique, we can further reduce the complexity of full key recovery to the surprisingly low value of $$2^{16.5}$$ 2 16.5 (i.e., only 90, 000 encryption/decryption operations are required for a full key recovery). In addition to improving previous attacks, our new technique unveils a hidden relationship between boomerang attacks and two other cryptanalytic techniques, the yoyo game and the recently introduced mixture differentials.

show abstract

Cryptanalysis on Reduced-Round 3D and Saturnin

Zhang

Zheng

et al. 2022

The Computer Journal

View full text Add to dashboard Cite

3D is an Advanced Encryption Standard (AES)-like cipher employed 3D structure proposed in 2008. The main innovation of 3D is the multi-dimensional state, generalizing the design of Rijndael and allowing block sizes beyond the 256-bit boundary. Saturnin, a lightweight block cipher has been selected as a second-round candidate in the National Institute of Standards and Technology standardization for lightweight cryptography. It also employs a 3D structure and provides high security against quantum and classic attacks. The exchange-equivalence attacks proposed by Bardeh and Rønjom consider how quadruples of plaintexts confirm distinguishable properties for AES. It is similar to the principle of yoyo attack, but it can find a longer number of rounds of distinguisher. In this paper, we investigate the exchange-equivalence attack on 3D and yoyo attack on Saturnin. Our new results turn out to be the first secret-key chosen plaintext distinguisher for 10-round 3D. The complexity of the distinguisher is about $2^{364.2}$ in terms of data, memory and computational complexity. For Saturnin, we propose the first six-super-round impossible differential yoyo attack, which is suitable for the two-S-layer version. Compared with the previous impossible differential attacks in the design report of Saturnin, the attacks presented here are the best in terms of the complexity under the chosen-plaintext scenario.

show abstract

MixColumns Coefficient Property and Security of the AES with A Secret S-Box

Cited by 3 publications

References 15 publications

Improved integral cryptanalysis of SPNbox in digital rights management systems

Improved integral cryptanalysis of SPNbox in digital rights management systems

The Retracing Boomerang Attack, with Application to Reduced-Round AES

Cryptanalysis on Reduced-Round 3D and Saturnin

Contact Info

Product

Resources

About