Modeling for three-subset division property without unknown subset. Improved cube attacks against Trivium and Grain-128AEAD

DOI10.1007/978-3-030-45721-1_17zbMath1479.94187OpenAlexW3022808104MaRDI QIDQ2055620

Yonglin Hao, Willi Meier, Yosuke Todo, Qingju Wang, Gregor Leander

Publication date: 1 December 2021

Full work available at URL: https://doi.org/10.1007/978-3-030-45721-1_17

zbMATH Keywords

stream ciphersMILPdivision propertycube attackthree-subset division property\textsc{Trivium}Grain-128AEAD

Mathematics Subject Classification ID

Cryptography (94A60)

Related Items (22)

Integral attacks on Pyjamask-96 and round-reduced Pyjamask-128 ⋮ Improved graph-based model for recovering superpoly on Trivium ⋮ Coefficient grouping: breaking Chaghri and more ⋮ Cryptanalysis of reduced round SPEEDY ⋮ Improved division property for ciphers with complex linear layers ⋮ An experimentally verified attack on 820-round Trivium ⋮ Optimizing rectangle attacks: a unified and generic framework for key recovery ⋮ On the field-based division property: applications to MiMC, Feistel MiMC and GMiMC ⋮ A practical key-recovery attack on 805-round Trivium ⋮ Convexity of division property transitions: theory, algorithms and compact models ⋮ Massive superpoly recovery with nested monomial predictions ⋮ Mathematical aspects of division property ⋮ Full round zero-sum distinguishers on \textsf{TinyJAMBU}-128 and \textsf{TinyJAMBU}-192 keyed-permutation in the known-key setting ⋮ Stretching cube attacks: improved methods to recover massive superpolies ⋮ From unbalanced to perfect: implementation of low energy stream ciphers ⋮ An algebraic formulation of the division property: revisiting degree evaluations, cube attacks, and key-independent sums ⋮ An algebraic attack on ciphers with low-degree round functions: application to full MiMC ⋮ Lower bounds on the degree of block ciphers ⋮ The MILP-aided conditional differential attack and its application to Trivium ⋮ Modeling for three-subset division property without unknown subset ⋮ Automatic search of meet-in-the-middle preimage attacks on AES-like hashing ⋮ Cryptanalysis of stream cipher LIZARD using division property and MILP based cube attack

Cites Work

• Unnamed Item
• Improved division property based cube attacks exploiting algebraic properties of superpoly
• Cube attacks on non-blackbox polynomials based on division property
• New differential bounds and division property of Lilliput: block cipher with extended generalized Feistel network
• On stream ciphers with provable beyond-the-birthday-bound security against time-memory-data tradeoff attacks
• Fast correlation attack revisited -- cryptanalysis on full Grain-128a, Grain-128, and Grain-v1
• A key-recovery attack on 855-round Trivium
• MILP-aided method of searching division property using three subsets and applications
• Automatic search for a variant of division property using three subsets
• An AEAD variant of the Grain stream cipher
• Automatic search of bit-based division property for ARX ciphers and word-based division property
• Cryptanalysis of Reduced-Round SIMON32 and SIMON48
• Structural Evaluation by Generalized Integral Property
• Applying MILP Method to Searching Integral Distinguishers Based on Division Property for 6 Lightweight Block Ciphers
• Integral Cryptanalysis on Full MISTY1
• Cube Attacks on Tweakable Black Box Polynomials
• The block cipher Square
• Bit-Based Division Property and Application to Simon Family
• Higher Order Derivatives and Differential Cryptanalysis
• GIFT: A Small Present

This page was built for publication: Modeling for three-subset division property without unknown subset. Improved cube attacks against Trivium and Grain-128AEAD