Cryptology ePrint Archive: Report 2019/037

Improving Attacks on Round-Reduced Speck32/64 using Deep Learning

Aron Gohr

Abstract: This paper has four main contributions. First, we calculate the predicted difference distribution of Speck32/64 with one specific input difference under the Markov assumption completely for up to eight rounds and verify that this yields a globally fairly good model of the difference distribution of Speck32/64. Secondly, we show that contrary to conventional wisdom, machine learning can produce very powerful cryptographic distinguishers: for instance, in a simple low-data, chosen plaintext attack on nine rounds of Speck, we present distinguishers based on deep residual neural networks that achieve a mean key rank roughly five times lower than an analogous classical distinguisher using the full difference distribution table. Thirdly, we develop a highly selective key search policy based on a variant of Bayesian optimization which, together with our neural distinguishers, can be used to reduce the remaining security of 11-round Speck32/64 to roughly 38 bits. This is a significant improvement over previous literature. Lastly, we show that our neural distinguishers successfully use features of the ciphertext pair distribution that are invisible to all purely differential distinguishers even given unlimited data. While our attack is based on a known input difference taken from the literature, we also show that neural networks can be used to rapidly (within a matter of minutes on our machine) find good input differences without using prior human cryptanalysis.

Category / Keywords: secret-key cryptography / Speck and Deep Learning and Cryptanalysis

Original Publication (in the same form): IACR-CRYPTO-2019

Date: received 15 Jan 2019, last revised 15 Aug 2019

Contact author: aron gohr at gmail com

Available format(s): PDF | BibTeX Citation

Note: Added hyperlinks for DOI and github repository.

Version: 20190815:205146 (All versions of this report)

Short URL: ia.cr/2019/037


[ Cryptology ePrint archive ]