Paper 2024/105

Differential cryptanalysis with SAT, SMT, MILP, and CP: a detailed comparison for bit-oriented primitives

Emanuele Bellini, Technology Innovation Institute

Alessandro De Piccoli, University of Milan

Mattia Formenti, Technology Innovation Institute

David Gerault, Technology Innovation Institute

Paul Huynh, Technology Innovation Institute

Simone Pelizzola

Sergio Polese

Andrea Visconti, University of Milan

Abstract

SAT, SMT, MILP, and CP, have become prominent in the differential cryptanalysis of cryptographic primitives. In this paper, we review the techniques for constructing differential characteristic search models in these four formalisms. Additionally, we perform a systematic comparison encompassing over 20 cryptographic primitives and 16 solvers, on both easy and hard instances of optimisation, enumeration and differential probability estimation problems.

Metadata

Available format(s)

PDF

Category

Secret-key cryptography

Publication info

Published elsewhere. CANS23

DOI

10.1007/978-981-99-7563-1_13

Keywords

Differential cryptanalysisSATSMTMILPCP

Contact author(s)

emanuele bellini @ tii ae
david gerault @ tii ae

History

2024-01-26: approved

2024-01-24: received

See all versions

Short URL

https://ia.cr/2024/105

License

CC BY

BibTeX Copy to clipboard

@misc{cryptoeprint:2024/105,
      author = {Emanuele Bellini and Alessandro De Piccoli and Mattia Formenti and David Gerault and Paul Huynh and Simone Pelizzola and Sergio Polese and Andrea Visconti},
      title = {Differential cryptanalysis with SAT, SMT, MILP, and CP: a detailed comparison for bit-oriented primitives},
      howpublished = {Cryptology ePrint Archive, Paper 2024/105},
      year = {2024},
      doi = {10.1007/978-981-99-7563-1_13},
      note = {\url{https://eprint.iacr.org/2024/105}},
      url = {https://eprint.iacr.org/2024/105}
}