KSII Transactions on Internet and Information Systems (TIIS)

Korean Society for Internet Information (한국인터넷정보학회)
권호 표지
DOI QR코드

DOI QR Code

Improved Conditional Differential Attacks on Round-Reduced Grain v1

  • Li, Jun-Zhi (Zhengzhou Institute of Information Science and Technology) ;
  • Guan, Jie (Zhengzhou Institute of Information Science and Technology)
  • Received : 2017.10.06
  • Accepted : 2018.04.02
  • Published : 2018.09.30
Download PDF
⟨ Previous Next ⟩

Abstract

Conditional differential attack against NFSR-based cryptosystems proposed by Knellwolf et al. in Asiacrypt 2010 has been widely used for analyzing round-reduced Grain v1. In this paper, we present improved conditional differential attacks on Grain v1 based on a factorization simplification method, which makes it possible to obtain the expressions of internal states in more rounds and analyze the expressions more precisely. Following a condition-imposing strategy that saves more IV bits, Sarkar's distinguishing attack on Grain v1 of 106 rounds is improved to a key recovery attack. Moreover, we show new distinguishing attack and key recovery attack on Grain v1 of 107 rounds with lower complexity O($2^{34}$) and appreciable theoretical success probability 93.7%. Most importantly, our attacks can practically recover key expressions with higher success probability than theoretical results.

Keywords

References

  1. M. Hell, T. Johansson, and W. Meier, "Grain: a stream cipher for constrained environments," International Journal of Wireless and Mobile Computing, vol. 2, no. 1, pp. 86-93, May, 2007. https://doi.org/10.1504/IJWMC.2007.013798
  2. M. Robshaw, "The eSTREAM Project," New Stream Cipher Designs: The eSTREAM Finalists, pp. 1-6, Berlin, Heidelberg: Springer Berlin Heidelberg, 2008.
  3. S. Knellwolf, W. Meier, and M. Naya-Plasencia, "Conditional differential cryptanalysis of NLFSR-based cryptosystems," in Proc. of 16th International Conference on the Theory and Application of Cryptology and Information Security, pp. 130-145, December 5-9, 2010.
  4. S. Banik, "Some Insights into Differential Cryptanalysis of Grain v1," in Proc. of Information Security and Privacy: 19th Australasian Conference, pp. 34-49, July 7-9, 2014.
  5. S. Sarkar, "A New Distinguisher on Grain v1 for 106 Rounds," in Proc. of Information Systems Security: 11th International Conference, pp. 334-344, December 16-20, 2015.
  6. Z. Ma, T. Tian, and W. F. Qi, "Improved conditional differential attacks on Grain v1," IET Information Security, vol. 11, no. 1, pp. 46-53, January, 2017. https://doi.org/10.1049/iet-ifs.2015.0427
  7. Y. Watanabe, Y. Todo, and M. Morii, "New Conditional Differential Cryptanalysis for NLFSR-based Stream Ciphers and Application to Grain v1," in Proc. of Information Security (AsiaJCIS), 2016 11th Asia Joint Conference on. IEEE, pp. 115-231, August 4-5, 2016.
  8. S. Banik, "Conditional differential cryptanalysis of 105 round Grain v1," Cryptography and Communications, vol. 8, no. 1, pp. 113-137, January, 2016. https://doi.org/10.1007/s12095-015-0146-5
  9. Y. Lee, K. Jeong, J. Sung, and S. Hong, "Related-Key Chosen IV Attacks on Grain-v1 and Grain-128," in Proc. of Information Security and Privacy: 13th Australasian Conference, pp. 321-335, July 7-9, 2008.
  10. B. Zhang, Z. Li, D. Feng, and D. Lin, "Near Collision Attack on the Grain v1 Stream Cipher," in Proc. of Revised Selected Papers of Fast Software Encryption: 20th International Workshop, pp. 518-538, March 11-13, 2013.
  11. S. Banik, S. Maitra, and S. Sarkar, "A Differential Fault Attack on the Grain Family of Stream Ciphers," in Proc. of Cryptographic Hardware and Embedded Systems - CHES 2012: 14th International Workshop, pp. 122-139, September 9-12, 2012.
  12. S. Sarkar, S. Banik, and S. Maitra, "Differential Fault Attack against Grain family with very few faults and minimal assumptions," IEEE Transactions on Computers, vol. 64, no. 6, pp. 1647-1657, June, 2015. https://doi.org/10.1109/TC.2014.2339854
  13. S. Knellwolf, W. Meier, and M. Naya-Plasencia, "Conditional Differential Cryptanalysis of Trivium and KATAN," In Revised Selected Papers of Selected Areas in Cryptography: 18th International Workshop, pp. 200-212, August 11-12, 2011.