### Vectorized linear approximations for attacks on SNOW 3G

Jing Yang, Thomas Johansson, and Alexander Maximov

##### Abstract

SNOW 3G is a stream cipher designed in 2006 by ETSI/SAGE, serving in 3GPP as one of the standard algorithms for data confidentiality and integrity protection. It is also included in the 4G LTE standard. In this paper we derive vectorized linear approximations of the finite state machine in SNOW 3G. In particular, we show one 24-bit approximation with a bias around $2^{-37}$ and one byte-oriented approximation with a bias around $2^{-40}$. We then use the approximations to launch attacks on SNOW 3G. The first approximation is used in a distinguishing attack resulting in an expected complexity of $2^{172}$ and the second one can be used in a standard fast correlation attack resulting in key recovery in an expected complexity of $2^{177}$. If the key length in SNOW 3G would be increased to 256 bits, the results show that there are then academic attacks on such a version faster than the exhaustive key search.

Available format(s)
Category
Secret-key cryptography
Publication info
Keywords
SNOW 3GStream Cipher5G Mobile System Security
Contact author(s)
alexander maximov @ ericsson com
History
2019-11-26: revised
See all versions
Short URL
https://ia.cr/2019/991

CC BY

BibTeX

@misc{cryptoeprint:2019/991,
author = {Jing Yang and Thomas Johansson and Alexander Maximov},
title = {Vectorized linear approximations for attacks on SNOW 3G},
howpublished = {Cryptology ePrint Archive, Paper 2019/991},
year = {2019},
note = {\url{https://eprint.iacr.org/2019/991}},
url = {https://eprint.iacr.org/2019/991}
}

Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.