Cryptology ePrint Archive: Report 2012/163

Differential propagation analysis of Keccak

Joan Daemen and Gilles Van Assche

Abstract: In this paper we introduce new concepts that help read and understand low-weight differential trails in Keccak. We then propose efficient techniques to exhaustively generate all 3-round trails in its largest permutation below a given weight. This allows us to prove that any 6-round differential trail in Keccak-f[1600] has weight at least 74. In the worst-case diffusion scenario where the mixing layer acts as the identity, we refine the lower bound to 82 by systematically constructing trails using a specific representation of states.

Category / Keywords: cryptographic hash function, Keccak, differential cryptanalysis, computer-aided proof

Publication Info: Full version of the paper presented at FSE 2012

Date: received 26 Mar 2012, last revised 26 Apr 2012

Contact author: gilles vanassche at st com

Available format(s): PDF | BibTeX Citation

Note: Added reference to the source code.

Version: 20120426:093226 (All versions of this report)

Discussion forum: Show discussion | Start new discussion


[ Cryptology ePrint archive ]