Cryptology ePrint Archive: Report 2010/105
Bias in the nonlinear filter generator output sequence
Sui-Guan Teo and Leonie Simpson and Ed Dawson
Abstract: Nonlinear filter generators are common components used in the keystream generators for stream ciphers and more recently for authentication mechanisms. They consist of a Linear Feedback Shift Register (LFSR) and a nonlinear Boolean function to mask the linearity of the LFSR output. Properties of the output of a nonlinear filter are not well studied. Anderson noted that the $m$-tuple output of a nonlinear filter with consecutive taps to the filter function is unevenly distributed. Current designs use taps which are not consecutive. We examine $m$-tuple outputs from nonlinear filter generators constructed using various LFSRs and Boolean functions for both consecutive and uneven (full positive difference sets where possible) tap positions. The investigation reveals that in both cases, the $m$-tuple output is not uniform. However, consecutive tap positions result in a more biased distribution than uneven tap positions, with some m-tuples not occurring at all. These biased distributions indicate a potential flaw that could be exploited for cryptanalysis.
Category / Keywords: Nonlinear filter generator, Stream Cipher, Output Sequences
Publication Info: Accepted at the International Cryptology Conference 2010. This is the full version of the paper.
Date: received 25 Feb 2010, last revised 4 Jul 2010
Contact author: sg teo at qut edu au
Available format(s): PDF | BibTeX Citation
Note: Corrected a few typographical errors in the paper.
Version: 20100705:015141 (All versions of this report)
Short URL: ia.cr/2010/105
Discussion forum: Show discussion | Start new discussion
[ Cryptology ePrint archive ]