Beyond-Full-Round Integral Distinguisher of NIST Lightweight Cryptography Competition Finalist TinyJAMBU

Akram Khalesi; Zahra Ahmadian

Paper 2023/960

Beyond-Full-Round Integral Distinguisher of NIST Lightweight Cryptography Competition Finalist TinyJAMBU

Akram Khalesi, Shahid Beheshti University

Zahra Ahmadian, Shahid Beheshti University

Abstract

TinyJAMBU is one of the ten finalists of the NIST lightweight cryptography competition, announced in March 2021. It proposes a lightweight authenticated encryption scheme based on a lightweight 128-bit keyed permutation. TinyJAMBU supports three key lengths 128, 192, and 256 denoted by TinyJambu-128, TinyJambu192, and TinyJambu-256, respectively. The scheme as well as the permutation is well studied by the designers and third parties. The most relevant work to ours is the full-round zero-sum distinguisher under the known-key setting assumption published at Indocrypt 2022. In this work, we show that even without the known-key setting assumption, there are integral distinguishers not only for full-round versions of the permutations of TinyJambu-128 and TinyJambu-192 but also for round-increased versions of them up to 1273 rounds.

Metadata

Available format(s): PDF
Category: Attacks and cryptanalysis
Publication info: Preprint.
Contact author(s): a_khalesi @ sbu ac ir
z_ahmadian @ sbu ac ir
History: 2023-06-20: approved; 2023-06-19: received; See all versions
Short URL: https://ia.cr/2023/960
License: CC BY

BibTeX

@misc{cryptoeprint:2023/960,
      author = {Akram Khalesi and Zahra Ahmadian},
      title = {Beyond-Full-Round Integral Distinguisher of NIST Lightweight Cryptography Competition Finalist TinyJAMBU},
      howpublished = {Cryptology ePrint Archive, Paper 2023/960},
      year = {2023},
      note = {\url{https://eprint.iacr.org/2023/960}},
      url = {https://eprint.iacr.org/2023/960}
}