Cryptology ePrint Archive: Report 2007/378

Algebraic Structure Defectoscopy

Sean O'Neil

Abstract: We present a novel instrument of automated cryptanalysis suitable for measuring the number of rounds that can build one PRF round, so that 4 such rounds could be recommended as a Luby-Rackoff cipher secure against adaptive attacks. ASD tests can detect structural flaws in all kinds of cryptographic primitives and their implementations. We present our results for some of the well-known ciphers and hash functions and for some of the eSTREAM candidates. Our tools can distinguish complete Achterbahn, Grain v1 and Grain-128 from random, detect weak keys in the complete IDEA cipher and find fatal structural flaws even in complete ciphers like LILI, KeeLoq or TEA in a matter of seconds. Cryptanalysts can save their valuable time by requiring that all new ciphers must pass not only randomness tests, but also automated cryptanalysis tests like ours before they could be considered interesting for manual cryptanalytic study.

Category / Keywords: secret-key cryptography / ANF, automated cryptanalysis, randomness tests, luby-rackoff ciphers, security of ciphers, block ciphers, stream ciphers, hash functions

Publication Info: Tools for Cryptanalysis 2007 Workshop

Date: received 23 Sep 2007, last revised 12 Dec 2007

Contact author: sean at cryptolib com

Available format(s): PDF | BibTeX Citation

Note: Results of these tests applied to the AES candidates first appeared on purenoise.com in 1999. This paper was first submitted to the SASC 2007 workshop in December 2006 with a lot more technical information, but was rejected in January 2007. The results presented in this paper first appeared on defectoscopy.com in January 2007.

Version: 20071212:194334 (All versions of this report)

Short URL: ia.cr/2007/378

Discussion forum: Show discussion | Start new discussion