Cryptology ePrint Archive: Report 2010/105

Bias in the nonlinear filter generator output sequence

Sui-Guan Teo and Leonie Simpson and Ed Dawson

Abstract: Nonlinear filter generators are common components used in the keystream generators for stream ciphers and more recently for authentication mechanisms. They consist of a Linear Feedback Shift Register (LFSR) and a nonlinear Boolean function to mask the linearity of the LFSR output. Properties of the output of a nonlinear filter are not well studied. Anderson noted that the $m$-tuple output of a nonlinear filter with consecutive taps to the filter function is unevenly distributed. Current designs use taps which are not consecutive. We examine $m$-tuple outputs from nonlinear filter generators constructed using various LFSRs and Boolean functions for both consecutive and uneven (full positive difference sets where possible) tap positions. The investigation reveals that in both cases, the $m$-tuple output is not uniform. However, consecutive tap positions result in a more biased distribution than uneven tap positions, with some m-tuples not occurring at all. These biased distributions indicate a potential flaw that could be exploited for cryptanalysis.

Category / Keywords: Nonlinear filter generator, Stream Cipher, Output Sequences

Publication Info: Accepted at the International Cryptology Conference 2010. This is the full version of the paper.

Date: received 25 Feb 2010, last revised 4 Jul 2010

Contact author: sg teo at qut edu au

Available format(s): PDF | BibTeX Citation

Note: Corrected a few typographical errors in the paper.

Version: 20100705:015141 (All versions of this report)

Short URL:

[ Cryptology ePrint archive ]