论文信息 - Differential-Linear Attacks Against the Stream Cipher Phelix

Differential-Linear Attacks Against the Stream Cipher Phelix

The previous key recovery attacks against Helix obtain the key with about 288 operations using chosen nonces (reusing nonce) and about 1000 adaptively chosen plaintext words (or 235.6 chosen plaintext words). The stream cipher Phelix is the strengthened version of Helix. In this paper we apply the differential-linear cryptanalysis to recover the key of Phelix. With 234 chosen nonces and 237 chosen plaintext words, the key of Phelix can be recovered with about 241.5 operations.

[1] Bart Preneel,et al. Cryptanalysis of the Stream Cipher DECIM , 2006, FSE.

[2] Bruce Schneier,et al. Helix: Fast Encryption and Authentication in a Single Cryptographic Primitive , 2003, FSE.

[3] Bart Preneel,et al. Solving Systems of Differential Equations of Addition and Cryptanalysis of the Helix Cipher , 2005 .

[4] Bart Preneel,et al. Near Optimal Algorithms for Solving Differential Equations of Addition with Batch Queries , 2005, INDOCRYPT.

[5] Bart Preneel,et al. Cryptanalysis of the Stream Cipher ABC v2 , 2006, Selected Areas in Cryptography.

[6] Bart Preneel,et al. Solving Systems of Differential Equations of Addition , 2005, ACISP.

[7] C. R. Henson. Conclusion , 1969 .

[8] Frédéric Muller. Differential Attacks against the Helix Stream Cipher , 2004, FSE.