A practical state recovery attack on the stream cipher Sablier v1

Xiutao FENG; Fan ZHANG

Paper 2014/245

A practical state recovery attack on the stream cipher Sablier v1

Xiutao FENG and Fan ZHANG

Abstract

Sablier is an authenticated encryption cipher submitted to the CAESAR competition, which is composed of the encryption Sablier v1 and the authentication \textup{Au}. In this work we present a state recovery attack against the encryption Sablier v1 with time complexity about $2^{44}$ operations and data complexity about 24 of 16-bit keywords. Our attack is practical in the workstation. It is noticed that the update of the internal state of Sablier v1 is invertible, thus our attack can further deduce a key recovery attack and a forgery attack against the authenticated encryption Sablier. The result shows that Sablier v1 is far from the goal of its security design (80-bit level).

Metadata

Available format(s): PDF
Category: Secret-key cryptography
Publication info: Preprint. MINOR revision.
Keywords: CAESER stream ciphers Sablier state recovery attack
Contact author(s): fengxt @ amss ac cn
History: 2014-04-18: received
Short URL: https://ia.cr/2014/245
License: CC BY

BibTeX

@misc{cryptoeprint:2014/245,
      author = {Xiutao FENG and Fan ZHANG},
      title = {A practical state recovery attack on the stream cipher Sablier v1},
      howpublished = {Cryptology {ePrint} Archive, Paper 2014/245},
      year = {2014},
      url = {https://eprint.iacr.org/2014/245}
}