Iterative Probabilistic Cryptanalysis of RC4 Keystream Generator

An iterative probabilistic method for reconstructing the initial state of RC4 keystream generator from a short segment of the keystream sequence is developed. The cryptanalytic algorithm consists of a forward and backward recursive computation of the posterior probabilities of the internal state components given a keystream segment. While maintaining the computational complexity, the new method presents a theoretical and practical improvement of a recently proposed method of a similar type, as less entries of the initial table are required to be known for the attack to be successful. If these entries have to be guessed, then the attack is expected to remain infeasible for the recommended word size of RC4.