Rotational-XOR Cryptanalysis of Reduced-round SPECK

Liu, Yunwen; Witte, Glenn De; Ranea, Adrián; Ashur, Tomer

doi:10.46586/tosc.v2017.i3.24-36

Cited by 30 publications

(29 citation statements)

References 7 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Rather than considering just a rotational pair as in the case of rotational cryptanalysis, RX-cryptanalysis considers an RX-pair of the form (x, S γ (x) ⊕ α) where α is called the translation. The technique was successfully applied to ARXbased primitives, including the block cipher Speck [10] and the hash function SipHash [21].…”

Section: Rotational-xor Cryptanalysismentioning

confidence: 99%

“…The respective solver then returns an answer on whether all constraints can be satisfied simultaneously, and if the answer is positive it also returns a valid assignment. A number of ARX and AND-RX ciphers were studied using automatic search tools, in the context of differential cryptanalysis, linear cryptanalysis, division property, and RX-cryptanalysis [10,11,[14][15][16].…”

Section: Automated Search Of Rx-characteristics In Simon-like Ciphersmentioning

confidence: 99%

“…The successful application of RX-cryptanalysis to SPECK [10] reveals that the round constants sometimes interact in a constructive way between the rounds, i.e., that a broken symmetry caused by a round constant in round i may be restored-either fully or partially-by another constant injection in round j > i. As a result, new designs such as [8] now show resistance to RXcryptanalysis as part of their security argument.…”

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

Rotational-XOR Cryptanalysis of Simon-Like Block Ciphers

Liu

Ashur

et al. 2020

Information Security and Privacy

Self Cite

View full text Add to dashboard Cite

Rotational-XOR cryptanalysis is a cryptanalytic method aimed at finding distinguishable statistical properties in ARX-C ciphers, i.e., ciphers that can be described only by using modular addition, cyclic rotation, XOR, and the injection of constants. In this paper we extend RX-cryptanalysis to AND-RX ciphers, a similar design paradigm where the modular addition is replaced by vectorial bitwise AND; such ciphers include the block cipher families Simon and Simeck. We analyze the propagation of RX-differences through AND-RX rounds and develop closed form formula for their expected probability. Finally, we formulate an SMT model for searching RX-characteristics in Simon and Simeck.Evaluating our model we find RX-characteristics of up to 20, 27, and 35 rounds with respective probabilities of 2 −26 , 2 −42 , and 2 −54 for versions of Simeck with block sizes of 32, 48, and 64 bits, respectively, for large classes of weak keys in the related-key model. In most cases, these are the longest published distinguishers for the respective variants of Simeck.Interestingly, when we apply the model to the block cipher Simon, the best characteristic we are able to find covers 11 rounds of Simon32 with probability 2 −24 . To explain the gap between Simon and Simeck in terms of the number of distinguished rounds we study the impact of the key schedule and the specific rotation amounts of the round function on the propagation of RX-characteristics in Simon-like ciphers.

show abstract

Section: Rotational-xor Cryptanalysismentioning

confidence: 99%

Section: Automated Search Of Rx-characteristics In Simon-like Ciphersmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Rotational-XOR Cryptanalysis of Simon-Like Block Ciphers

Liu

Ashur

et al. 2020

Information Security and Privacy

Self Cite

View full text Add to dashboard Cite

show abstract

“…Then, 4 differential propagations can be searched in a sequential way by regarding those 4 propagations as an iterative differential trail against 24-round Simeck-48 and 32-round Simeck-64, which is now feasible and easy to optimize the combined results with existing automatic search tools. We follow the automatic search model of Simon and Speck [22,24], due to their similar structures with Simeck. In other word, we have taken some dependencies in the round functions of Simeck into account in the auto- matic search.…”

Section: Sliscp Mode For Hash Function and Authenticated Encryptionmentioning

confidence: 99%

Cryptanalysis of Reduced sLiSCP Permutation in Sponge-Hash and Duplex-AE Modes

Liu

Sasaki

Song

et al. 2019

Selected Areas in Cryptography – SAC 2018

Self Cite

View full text Add to dashboard Cite

This paper studies security of a family of lightweight permutations sLiSCP that was proposed by AlTawy et al. at SAC 2017. sLiSCP also specifies an authenticated encryption (AE) mode and a hashing mode based on the sponge framework, however the designers' analysis focuses on the indistinguishability of the permutation, and there is no analysis for those modes. This paper presents the first analysis of reduced-step sLiSCP in the AE and hashing modes fully respecting the recommended parameters and usage by the designers. Forgery and collision attacks are presented against 6 (out of 18) steps of the AE and hashing modes. Moreover, rebound distinguishers are presented against 15 steps of the permutation. We believe that those results especially about the AE and hashing modes provide a better understanding of sLiSCP, and bring more confidence about the lightweight version sLiSCP-light.

show abstract

“…In recent years, STP has become a common tool in cryptanalysis (e.g. [17][18][19][20][21][22]) and is often used in order to verify the differential properties of ARX primitives based on [17].…”

Section: Literature Reviewmentioning

confidence: 99%

CryptoSAT: a tool for SAT‐based cryptanalysis

Lafitte

2018

IET Information Security

View full text Add to dashboard Cite

Rotational-XOR Cryptanalysis of Reduced-round SPECK

Cited by 30 publications

References 7 publications

Rotational-XOR Cryptanalysis of Simon-Like Block Ciphers

Rotational-XOR Cryptanalysis of Simon-Like Block Ciphers

Cryptanalysis of Reduced sLiSCP Permutation in Sponge-Hash and Duplex-AE Modes

CryptoSAT: a tool for SAT‐based cryptanalysis

Contact Info

Product

Resources

About