[Resource Topic] 2020/538: Rotational Cryptanalysis on MAC Algorithm Chaskey

Welcome to the resource topic for 2020/538

Title:
Rotational Cryptanalysis on MAC Algorithm Chaskey

Authors: Liliya Kraleva, Tomer Ashur, Vincent Rijmen

Abstract:

In this paper we analyse the algorithm Chaskey - a lightweight MAC algorithm for 32-bit micro controllers - with respect to rotational cryptanalysis. We perform a related-key attack over Chaskey and find a distinguisher by using rotational probabilities. Having a message m we can forge and present a valid tag for some message under a related key with probability 2^{-57} for 8 rounds and 2^{-86} for all 12 rounds of the permutation for keys in a defined weak-key class. This attack can be extended to full key recovery with complexity 2^{120} for the full number of rounds. To our knowledge this is the first published attack targeting all 12 rounds of the algorithm. Additionally, we generalize the Markov theory with respect to a relation between two plaintexts and not their difference and apply it for rotational pairs.

ePrint: https://eprint.iacr.org/2020/538

See all topics related to this paper.

Feel free to post resources that are related to this paper below.

Example resources include: implementations, explanation materials, talks, slides, links to previous discussions on other websites.

For more information, see the rules for Resource Topics .