[Resource Topic] 2014/211: Some Randomness Experiments on TRIVIUM

Welcome to the resource topic for 2014/211

Some Randomness Experiments on TRIVIUM

Authors: Subhabrata Samajder, Palash Sarkar


The first output bit of TRIVIUM can be considered to be a boolean function of 80 key and 80 IV variables. Choose n (n\leq 30) of the key variables and set the other variables to constant values. This gives an n-variable boolean function. In this work, we experimentally find examples of such boolean functions which deviate from a uniform random n-variable boolean function in a statistically significant manner. This improves upon the previously reported experimental `non-randomness’ result using the cube testing methodology by Aumasson et al in 2009 for TRIVIUM restricted to 885 rounds. In contrast, we work with full TRIVIUM and instead of using the cube methodology we directly find the algebraic normal form of the restricted version of the first output bit of TRIVIUM. We note, however, that our work does not indicate any weakness of TRIVIUM. On the other hand, the kind of experiments that we conduct for TRIVIUM can also be conducted for other ciphers.

ePrint: https://eprint.iacr.org/2014/211

See all topics related to this paper.

Feel free to post resources that are related to this paper below.

Example resources include: implementations, explanation materials, talks, slides, links to previous discussions on other websites.

For more information, see the rules for Resource Topics .