论文信息 - Improved Linear Distinguishers for SNOW 2.0

Improved Linear Distinguishers for SNOW 2.0

In this paper we present new and more accurate estimates of the biases of the linear approximation of the FSM of the stream cipher SNOW 2.0. Based on improved bias estimates we also find a new linear distinguisher with bias 2 -86 9 that is significantly stronger than the previously found ones by Watanabe et al. (2003) and makes it possible to distinguish the output keystream of SNOW 2.0 of length 2 174 words from a truly random sequence with workload 21 74 . This attack is also stronger than the recent distinguishing attack by Maximov and Johansson (2005). We also investigate the diffusion properties of the MixColumn transformation used in the FSM of SNOW 2.0 and present some evidence why much more efficient distinguishers may not exist.

Kaisa Nyberg | Johan Wallén | K. Nyberg | J. Wallén

[1] Kaisa Nyberg,et al. Correlation Theorems in Cryptanalysis , 2001, Discret. Appl. Math..

[2] Olivier Billet,et al. Resistance of SNOW 2.0 Against Algebraic Attacks , 2005, CT-RSA.

[3] Shai Halevi,et al. Cryptanalysis of Stream Ciphers with Linear Masking , 2002, CRYPTO.

[4] Johan Wallén. Linear Approximations of Addition Modulo 2n , 2003, FSE.

[5] Thomas Johansson,et al. A New Version of the Stream Cipher SNOW , 2002, Selected Areas in Cryptography.

[6] Alexander Maximov,et al. Fast Computation of Large Distributions and Its Cryptographic Applications , 2005, ASIACRYPT.

[7] Mitsuru Matsui,et al. Linear Cryptanalysis Method for DES Cipher , 1994, EUROCRYPT.

[8] Alex Biryukov,et al. A Distinguishing Attack of SNOW 2.0 with Linear Masking Method , 2003, Selected Areas in Cryptography.