Welcome to the resource topic for 2015/160
Title:
Differential-Linear Cryptanalysis of ICEPOLE
Authors: Tao Huang, Ivan Tjuawinata, Hongjun Wu
Abstract:ICEPOLE is a CAESAR candidate with the intermediate level of robustness under nonce misuse circumstances in the original document. In particular, it was claimed that key recovery attack against ICEPOLE is impossible in the case of nonce misuse. ICEPOLE is strong against the differential cryptanalysis and linear cryptanalysis. In this paper, we developed the differential-linear attacks against ICEPOLE when nonce is misused. Our attacks show that the state of ICEPOLE-128 and ICEPOLE-128a can be recovered with data complexity 2^{46} and time complexity 2^{46}; the state of ICEPOLE-256a can be recovered with data complexity 2^{60} and time complexity 2^{60}. For ICEPOLE-128a and ICEPOLE-256a, the secret key is recovered once the state is recovered. We experimentally verified the attacks against ICEPOLE-128 and ICEPOLE-128a.
ePrint: https://eprint.iacr.org/2015/160
See all topics related to this paper.
Feel free to post resources that are related to this paper below.
Example resources include: implementations, explanation materials, talks, slides, links to previous discussions on other websites.
For more information, see the rules for Resource Topics .