Recovering the Key from the Internal State of Grain-128AEAD

Donghoon Chang; Meltem Sonmez Turan

Paper 2021/439

Recovering the Key from the Internal State of Grain-128AEAD

Donghoon Chang and Meltem Sonmez Turan

Abstract

Grain-128AEAD is one of the second-round candidates of the NIST lightweight cryptography standardization process. There is an existing body of third-party analysis on the earlier versions of the Grain family that provide insights on the security of Grain-128AEAD. Different from the earlier versions, Grain-128AEAD reintroduces the key into the internal state during the initialization. The designers claim that internal state recovery no longer results in key recovery, due to this change. In this paper, we analyze this claim under different scenarios.

Metadata

Available format(s): PDF
Category: Secret-key cryptography
Publication info: Preprint. MINOR revision.
Contact author(s): meltem turan @ nist gov
pointchang @ gmail com
History: 2021-04-06: received
Short URL: https://ia.cr/2021/439
License: CC BY

BibTeX

@misc{cryptoeprint:2021/439,
      author = {Donghoon Chang and Meltem Sonmez Turan},
      title = {Recovering the Key from the Internal State of Grain-{128AEAD}},
      howpublished = {Cryptology {ePrint} Archive, Paper 2021/439},
      year = {2021},
      url = {https://eprint.iacr.org/2021/439}
}