Welcome to the resource topic for 2015/312
Title:
Improving Key Recovery to 784 and 799 rounds of Trivium using Optimized Cube Attacks
Authors: Pierre-Alain Fouque, Thomas Vannet
Abstract:Dinur and Shamir have described cube attacks at EUROCRYPT ’09 and they have shown how efficient they are on the stream cipher Trivium up to 767 rounds. These attacks have been extended to distinguishers but since this seminal work, no better results on the complexity of key recovery attacks on Trivium have been presented. It appears that the time complexity to compute cubes is expensive and the discovery of linear superpoly also requires the computation of many cubes. In this paper, we increase the number of attacked initialization rounds by improving the time complexity of computing cube and we show attacks that go beyond this bound. We were able to find linear superpoly up to 784 rounds, which leads to an attack requiring 2^{39} queries. Using quadratic superpoly, we were also able to provide another attack up to 799 rounds which complexity is 2^{40} queries and 2^{62} for the exhaustive search part. To achieve such results, we find a way to reduce the density of the polynomials, we look for quadratic relations and we extensively use the Moebius transform to speed up computations for various purposes.
ePrint: https://eprint.iacr.org/2015/312
Talk: https://www.youtube.com/watch?v=K5MQzwHPyis
Slides: https://iacr.org/cryptodb/archive/2013/FSE/presentation/25058.pdf
See all topics related to this paper.
Feel free to post resources that are related to this paper below.
Example resources include: implementations, explanation materials, talks, slides, links to previous discussions on other websites.
For more information, see the rules for Resource Topics .