## Cryptology ePrint Archive: Report 2006/070

The experimental distinguishing attack on RC4

Sergey Doroshenko and Boris Ryabko

Abstract: The output of RC4 was analyzed using the "book stack" test for randomness. It is experimentally shown that the keystream generated from RC4 can be distinguished from random with about $2^{32}$ output bits.

Category / Keywords: secret-key cryptography / stream ciphers