Symmetric Cryptography 2016
|
|
- Anabel Ray
- 5 years ago
- Views:
Transcription
1 Symmetric Cryptography 2016 Monday, January 11 7:30 Session Chair: Frederik Armknecht Dynamic Cube Attacks Revisited, with Applications to Grain128a Another View of the Division Property Invariant Subspace Attack Against Full Midori64 Session Chair: Yu Sasaki Willi Meier Anne Canteaut Yu Sasaki 12:15 On GCMSIV Tetsu Iwata RIV and Resilient Authenticated Encryption Stefan Lucks Session Chair: Anne Canteaut 14:00 Memory Efficient Algorithms for Finding Needles in Haystacks Adi Shamir Bit Cryptanalysis on Symmetric Ciphers Xiaoyun Wang The Problem of Estimating the Variance of the Linear Cryptanalysis Test Statistic and Cake Kaisa Nyberg Session Chair/Moderator: Dan Bernstein (17:30) 18:00 1 Separating Modes and Primitives in CAESAR Joan Daemen Discussion on CAESAR
2 Tuesday, January 12 7:30 Session Chair: Jooyoung Lee KeyAlternating PRFs and Provable Security of Stream Ciphers against TimeMemoryData Tradeoff Attacks Improved Masking for Tweakable Blockciphers with Applications to Authenticated Encryption Tweaking EvenMansour Ciphers Session Chair: Bart Mennink Matthias Krause Bart Mennink Benoît Cogliati Indifferentiability of ConfusionDiffusion Networks John Steinberger 60 min 12:15 Moderation: Adi Shamir 14:30 Discussion on Attacks and Cake Session Chair: John Steinberger 18:00 18:00 1 EvenMansour type ciphers based on involutions Jooyoung Lee EvenMansour cipher analysis reduced to the generalized birthday problem Transitivity aspects of the (iterated) Even Mansour cipher Ivica Nikolic Ernst Schulte Geers
3 Wednesday, January 13 7:30 Session Chair: Nicky Mouha Polytopic cryptanalysis Tyge Tiessen Linear Cryptanalysis: Some bizarre bias distributions Universal Multidimensional and Multiple Zero Correlation Cryptanalysis KeyRecovery Attack on the ASASA Cryptosystem with Expanding SBoxes Gregor Leander Meiqin Wang Henri Gilbert 10 min Session Chair: Christian Rechberger 12:15 LowEnergy Block Ciphers Some Results on the GOST Block Ciphers Andrey Bogdanov Orr Dunkelman Hike and Cake Free for discussions 18:00 1
4 Thursday, January 14 7:30 Session Chair/Moderator: Orr Dunkelman SBox ReverseEngineering: Recovering Design Criteria, Hidden Structures and New Boolean Function Results Léo Perrin Simpira Nicky Mouha Discussion on Secret Agency Crypto Standards Session Chair: Gregor Leander 40 min 12:15 New Attacks on Hash function Combiners Itai Dinur Transcipt Collision Attacks against TLS Gaëtan Leurent Session Chair: 14:00 Egalitarian computing: how to establish a level playing field with hash functions and NPhard problems Dmitry Khovratovich New Publication Model for FSE Anne Canteaut MAC with low computation overhead Kazuhiko Minematsu and Cake Session Chair: Bart Preneel 18:00 18:00 1 Some Application of Symmetric Cryptography in Multi Party Computation A new cryptographic hash function design below 1 cycle per byte for short inputs Revisiting Structure Graph and Its Applications to CBCMAC and EMAC Second Preimage Attacks against Dithered Hash Functions with Practical Online Memory Complexity Elena Andreeva Christian Rechberger Mridul Nandi Orr Dunkelman 10 min
5 Friday, January 15 7:30 9:20 10:35 10:35 Provable Security Evaluation of Structures against Impossible Differential Cryptanalysis On Ciphers that Continuously Access the NonVolatile Key Directly Evaluating Multicollisions and Improving Security Bounds Session Chair: Stefan Lucks Jian Guo Frederik Armknecht Kan Yasuda Session Chair: Kan Yasuda 15 min 12:15 Some challenges in heavyweight cipher design Mirror Theory and Cryptography Dan Bernstein Jacques Patarin
Fast Software Encryption 2017
Fast Software Encryption 2017 Program All technical sessions and coffee breaks take place in the Hall D7 at Tokyo International Forum. Lunch is available in the Hall D5. All talks are 20 minutes including
More informationMeet-in-the-Middle Preimage Attacks on AES Hashing Modes and an Application to Whirlpool
Meet-in-the-Middle Preimage Attacks on AES Hashing Modes and an Application to Whirlpool Yu Sasaki NTT Information Sharing Platform Laboratories, NTT Corporation 3-9-11 Midoricho, Musashino-shi, Tokyo
More informationFirst practical results on reduced-round Keccak Unaligned rebound attack. María Naya-Plasencia INRIA Paris-Rocquencourt, France
First practical results on reduced-round Keccak Unaligned rebound attack María Naya-Plasencia INRIA Paris-Rocquencourt, France Outline Introduction First Practical Results [NP-Röck-Meier11] CP-Kernel:
More informationNarrow-Bicliques: Cryptanalysis of Full IDEA. Gaetan Leurent, University of Luxembourg Christian Rechberger, DTU MAT
Narrow-Bicliques: Cryptanalysis of Full IDEA Dmitry Khovratovich, h Microsoft Research Gaetan Leurent, University of Luxembourg Christian Rechberger, DTU MAT Cryptanalysis 101 Differential attacks Linear
More informationBlockcipher-based Authentcated Encryption: How Small Can We Go? CHES 2017, Taipei, Taiwan
Blockcipher-based Authentcated Encryption: How Small Can We Go? Avik Chakraborti (NTT Secure Platform laboratories, Japan) Tetsu Iwata (Nagoya University, Japan) Kazuhiko Minematsu (NEC Corporation, Japan)
More informationCryptanalysis of Iterated Even-Mansour Schemes with Two Keys
Cryptanalysis of Iterated Even-Mansour Schemes with Two Keys Itai Dinur 1,, Orr Dunkelman 2,3,, Nathan Keller 3,4,, and Adi Shamir 4 1 Département d Informatique, École Normale Supérieure, Paris, France
More informationImproved Linear Sieving Techniques with Applications to Step-Reduced LED-64
Improved Linear Sieving Techniques with Applications to Step-Reduced LED-64 Itai Dinur 1,, Orr Dunkelman 2,4,, Nathan Keller 3,4,, and Adi Shamir 4 1 Département d Informatique, École Normale Supérieure,
More informationBiclique Cryptanalysis of TWINE
Biclique Cryptanalysis of TWINE Mustafa Çoban 1,2, Ferhat Karakoç 1,3, and Özkan Boztaş 1,4 1 TÜBİTAK BİLGEM UEKAE, 41470, Gebze, Kocaeli, Turkey {mustafacoban, ferhatk, ozkan}@uekae.tubitak.gov.tr 2 Sakarya
More informationUpdates on CLOC and SILC Version 3
Updates on CLOC and SILC Version 3 Tetsu Iwata*, Kazuhiko Minematsu, Jian Guo, Sumio Morioka, and Eita Kobayashi DIAC 2016 September 26, 2016, Nagoya, Japan * Supported in part by JSPS KAKENHI, Grant in
More informationA Meet in the Middle Attack on Reduced Round Kuznyechik
IEICE TRANS. FUNDAMENTALS, VOL.Exx??, NO.xx XXXX 200x 1 LETTER Special Section on Cryptography and Information Security A Meet in the Middle Attack on Reduced Round Kuznyechik Riham ALTAWY a), Member and
More informationBlock Ciphers that are Easier to Mask How Far Can we Go?
Block Ciphers that are Easier to Mask How Far Can we Go? Benoît Gérard, Vincent Grosso, María Naya-Plasencia, François-Xavier Standaert DGA & UCL Crypto Group & INRIA CHES 2013 Santa Barbara, USA Block
More informationA Splice-and-Cut Cryptanalysis of the AES
A Splice-and-Cut Cryptanalysis of the AES Dmitry Khovratovich 1 and Christian Rechberger 2 1 Microsoft Research Redmond 2 ENS Paris and Chaire France Telecom May 28, 2011 Abstract Since Rijndael was chosen
More informationOn authenticated encryption and the CAESAR competition
On authenticated encryption and the CAESAR competition Joan Daemen STMicroelectronics and Radboud University Crypto summer school 2015 Šibenik, Croatia, May 31 - June 5, 2015 1 / 39 What is authenticated
More informationAPE: Authenticated Permutation-Based Encryption for Lightweight Cryptography
APE: Authenticated Permutation-Based Encryption for Lightweight Cryptography Elena Andreeva, Begül Bilgin, Andrey Bogdanov, Atul Luykx, Bart Mennink, Nicky Mouha, Kan Yasuda KU Leuven, UTwente, DTU, NTT
More informationPermutation-based symmetric cryptography
Permutation-based symmetric cryptography Guido Bertoni 1 Joan Daemen 1 Michaël Peeters 2 Gilles Van Assche 1 1 STMicroelectronics 2 NXP Semiconductors Keccak & SHA-3 Day Université Libre de Bruxelles March
More informationCryptanalysis vs. Reality
1 / 67 Cryptanalysis vs. Reality Jean-Philippe Aumasson http://131002.net @aumasson Cryptanalysis is the study of methods for obtaining the meaning of encrypted information without access to the secret
More informationDistinguisher and Related-Key Attack on the Full AES-256
Distinguisher and Related-Key Attack on the Full AES-256 Alex Biryukov, Dmitry Khovratovich, Ivica Nikolić University of Luxembourg {alex.biryukov, dmitry.khovratovich, ivica.nikolic@uni.lu} Abstract.
More informationImproved Linear Sieving Techniques with Applications to Step-Reduced LED-64
Improved Linear Sieving Techniques with Applications to Step-Reduced LED-64 Itai Dinur 1, Orr Dunkelman 2,4, Nathan eller 3 and Adi Shamir 4 1 École normale supérieure, France 2 University of Haifa, Israel
More informationReport regarding the winter school on Hash 3 : Proofs, Analysis and Implementation
Report regarding the winter school on Hash 3 : Proofs, Analysis and Implementation Praveen Gauravaram Department of Mathematics, Technical University of Denmark Building S303, Matematiktorvet Kgs.Lyngby,
More informationNEW COMPRESSION FUNCTION TO SHA-256 BASED ON THE TECHNIQUES OF DES.
NEW COMPRESSION FUNCTION TO SHA-256 BASED ON THE TECHNIQUES OF DES. 1 ZAKARIA KADDOURI, 2 FOUZIA OMARY, 3 ABDOLLAH ABOUCHOUAR, 4 MOHSSIN DAARI, 5 KHADIJA ACHKOUN. LRI Laboratory (Ex: Networks and Data
More informationsymmetric cryptography s642 computer security adam everspaugh
symmetric cryptography s642 adam everspaugh ace@cs.wisc.edu computer security Announcement Midterm next week: Monday, March 7 (in-class) Midterm Review session Friday: March 4 (here, normal class time)
More informationFinding Second Preimages of Short Messages for Hamsi-256
Finding Second Preimages of Short Messages for Hamsi-256 Thomas Fuhr ANSSI, Paris, France and TELECOM-ParisTech, Paris, France thomas.fuhr@ssi.gouv.fr Abstract. In this paper we study the second preimage
More information09031 Abstracts Collection Symmetric Cryptography. Dagstuhl Seminar
09031 Abstracts Collection Symmetric Cryptography Dagstuhl Seminar Helena Handschuh 1, Stefan Lucks 2, Bart Preneel 3 and Phillip Rogaway 4 1 Spansion - Levallois-Perret, F helena.handschuh@spansion.com
More informationCLOC: Authenticated Encryption
CLOC: Authenticated Encryption for Short Input Tetsu Iwata, Nagoya University Kazuhiko Minematsu, NEC Corporation Jian Guo, Nanyang Technological University Sumio Morioka, NEC Europe Ltd. FSE 2014 March
More informationRecent Meet-in-the-Middle Attacks on Block Ciphers
ASK 2012 Nagoya, Japan Recent Meet-in-the-Middle Attacks on Block Ciphers Takanori Isobe Sony Corporation (Joint work with Kyoji Shibutani) Outline 1. Meet-in-the-Middle (MitM) attacks on Block ciphers
More informationEvaluation of security level of CLEFIA
Evaluation of security level of CLEFIA An anonymous reviewer Version 1.0 January 25, 2011 1 Evaluation of security level of CLEFIA 1 Contents Executive Summary 3 References 4 1 Introduction 8 2 CLEFIA
More informationsymmetric cryptography s642 computer security adam everspaugh
symmetric cryptography s642 adam everspaugh ace@cs.wisc.edu computer security Announcements Midterm next week: Monday, March 7 (in-class) Midterm Review session Friday: March 4 (here, normal class time)
More informationCUBE-TYPE ALGEBRAIC ATTACKS ON WIRELESS ENCRYPTION PROTOCOLS
CUBE-TYPE ALGEBRAIC ATTACKS ON WIRELESS ENCRYPTION PROTOCOLS George W. Dinolt, James Bret Michael, Nikolaos Petrakos, Pantelimon Stanica Short-range (Bluetooth) and to so extent medium-range (WiFi) wireless
More informationPAPER On Design of Robust Lightweight Stream Cipher with Short Internal State
IEICE TRANS.??, VOL.Exx??, NO.xx XXXX 200x 1 PAPER On Design of Robust Lightweight Stream Cipher with Short Internal State Subhadeep BANIK, Takanori ISOBE, Nonmembers, and Masakatu MORII, Senior Member
More informationUpdates on CLOC and SILC
Updates on CLOC and SILC Tetsu Iwata*, Kazuhiko Minematsu, Jian Guo, Sumio Morioka, and Eita Kobayashi DIAC 2015 September 28, 2015, Singapore * Supported in part by JSPS KAKENHI, Grant in Aid for Scientific
More informationMatch Box Meet-in-the-Middle Attack against KATAN
Match Box Meet-in-the-Middle Attack against KATAN Thomas Fuhr and Brice Minaud ANSSI, 51, boulevard de la Tour-Maubourg, 75700 Paris 07 SP, France thomas.fuhr@ssi.gouv.fr,brice.minaud@gmail.com Abstract.
More informationHash Function. Guido Bertoni Luca Breveglieri. Fundations of Cryptography - hash function pp. 1 / 18
Hash Function Guido Bertoni Luca Breveglieri Fundations of Cryptography - hash function pp. 1 / 18 Definition a hash function H is defined as follows: H : msg space digest space the msg space is the set
More information3 rd SKINNY Breaking Competition
3 rd SKINNY Breaking Competition C. Beierle, J. Jean, S. Kӧlbl, G. Leander, A. Moradi, T. Peyrin, Y. Sasaki, P. Sasdrich and S.M. Sim Eurocrypt 2018 Rump Session@ Tel Aviv 01/May/2018 SKINNY Overview Lightweight
More informationThe JAMBU Lightweight Authentication Encryption Mode (v2)
The JAMBU Lightweight Authentication Encryption Mode (v2) 29 Aug, 2015 Designers: Hongjun Wu, Tao Huang Submitters: Hongjun Wu, Tao Huang Contact: wuhongjun@gmail.com Division of Mathematical Sciences
More informationDesign and Analysis of a New Hash Function Gear
Design and Analysis of a New Hash Function Gear Mohammad A. AlAhmad Public Authority for Applied Education and Training College of Basic Education Computer Science Department P.O.Box 34567 Adaliyah, 73205
More informationCryptanalysis vs. Reality. Small Cryptanalysis
1 / 34 Cryptanalysis vs. Reality + Small Cryptanalysis Jean-Philippe Aumasson http://131002.net @aumasson 2 / 34 Cryptanalysis used to be connected to reality (replica of a Turing s bombe used to break
More informationSecurity Analysis of Extended Sponge Functions. Thomas Peyrin
Security Analysis of Extended Sponge Functions Hash functions in cryptology: theory and practice Leiden, Netherlands Orange Labs University of Versailles June 4, 2008 Outline 1 The Extended Sponge Functions
More informationThe SKINNY Family of Lightweight Tweakable Block Ciphers
The SKINNY Family of Lightweight Tweakable Block Ciphers Jérémy Jean joint work with: Christof Beierle Stefan Kölbl Gregor Leander Amir Moradi Thomas Peyrin Yu Sasaki Pascal Sasdrich Siang Meng Sim CRYPTO
More informationMore engineering. considerations for the SHA-3 hash function
More engineering considerations for the SHA-3 hash function Jean-Philippe Aumasson Dan Bernstein Charles Bouillaguet Daniel Brown Orr Dunkelman Sebastiaan Indesteege Emilia Käsper Dmitry Khovratovich Jongsung
More informationEarly Symmetric Crypto ESC 2015
January 12 16, 2015 Clervaux Luxembourg Early Symmetric Crypto ESC 2015 Program Chairs Alex Biryukov Joan Daemen Stefan Lucks Serge Vaudenay University of Luxembourg, Luxembourg STMicroelectronics Bauhaus-Universität,
More informationH must be collision (2n/2 function calls), 2nd-preimage (2n function calls) and preimage resistant (2n function calls)
What is a hash function? mapping of: {0, 1} {0, 1} n H must be collision (2n/2 function calls), 2nd-preimage (2n function calls) and preimage resistant (2n function calls) The Merkle-Damgård algorithm
More informationR-MAC A lightwheight authentication protocol for RFID Tags
R-MAC A lightwheight authentication protocol for RFID Tags Ahmad Khoureich Ka Dept. of Computer Science, Université Alioune Diop de Bambey, Sénégal, ahmadkhoureich.ka@uadb.edu.sn Abstract. Nowadays, RFID
More informationWeak Keys. References
Weak Keys The strength of the encryption function E K (P) may differ significantly for different keys K. If for some set WK of keys the encryption function is much weaker than for the others this set is
More informationWith Intel C++ v for Windows it achieves the following speeds:
OFFICIAL COMMENT: EDON-R 1 of 1 12/15/2008 9:45 AM Subject: OFFICIAL COMMENT: EDON-R From: "Danilo Gligoroski" Date: Mon, 15 Dec 2008 13:27:30 +0100 To:
More informationPOMELO A Password Hashing Algorithm (Version 2)
POMELO A Password Hashing Algorithm (Version 2) Designer and Submitter: Hongjun Wu Division of Mathematical Sciences Nanyang Technological University wuhongjun@gmail.com (last modified on 2015.04.13) Contents
More informationBiclique Cryptanalysis of the Full AES
Biclique Cryptanalysis of the Full AES Andrey Bogdanov, Dmitry Khovratovich, and Christian Rechberger K.U. Leuven, Belgium; Microsoft Research Redmond, USA; ENS Paris and Chaire France Telecom, France
More informationAEGIS. A Fast Authenticated Encryption Algorithm. Nanyang Technological University KU Leuven and iminds DIAC 2014 AEGIS 1
AEGIS A Fast Authenticated Encryption Algorithm Hongjun Wu Bart Preneel Nanyang Technological University KU Leuven and iminds 1 AEGIS: A shield carried by Athena and Zeus 2 Different Design Approaches:
More informationTwo Attacks Against the HBB Stream Cipher
Two Attacks Against the HBB Stream Cipher Antoine Joux 1 and Frédéric Muller 2 1 DGA and Univ. Versailles St-Quentin Antoine.Joux@m4x.org 2 DCSSI Crypto Lab Frederic.Muller@sgdn.pm.gouv.fr Abstract. Hiji-Bij-Bij
More informationMergeMAC: A MAC for Authentication with Strict Time Constraints and Limited Bandwidth
MergeMAC: A MAC for Authentication with Strict Time Constraints and Limited Bandwidth Ralph Ankele 1, Florian Böhl 2, Simon Friedberger 2 1 Royal Holloway University of London, United Kingdom. ralph.ankele.2015@rhul.ac.uk
More informationSkein. John Kevin Hicks
Skein John Kevin Hicks 2 Outline Introduction Skein Overview Threefish Block Cipher Unique Block Iteration Optional Argument System Skein Performance Security Claims and Current Cryptanalysis Conclusions
More informationCryptanalysis of TWIS Block Cipher
Cryptanalysis of TWIS Block Cipher Onur Koçak and Neşe Öztop Institute of Applied Mathematics, Middle East Technical University, Turkey {onur.kocak,noztop}@metu.edu.tr Abstract. TWIS is a 128-bit lightweight
More informationEEC-682/782 Computer Networks I
EEC-682/782 Computer Networks I Lecture 23 Wenbing Zhao wenbingz@gmail.com http://academic.csuohio.edu/zhao_w/teaching/eec682.htm (Lecture nodes are based on materials supplied by Dr. Louise Moser at UCSB
More information9/30/2016. Cryptography Basics. Outline. Encryption/Decryption. Cryptanalysis. Caesar Cipher. Mono-Alphabetic Ciphers
Cryptography Basics IT443 Network Security Administration Slides courtesy of Bo Sheng Basic concepts in cryptography systems Secret cryptography Public cryptography 1 2 Encryption/Decryption Cryptanalysis
More informationChaskey: An Efficient MAC Algorithm for 32-bit Microcontrollers
Chaskey: An Efficient MAC Algorithm for 32-bit Microcontrollers Nicky Mouha 1(B), Bart Mennink 1, Anthony Van Herrewege 1, Dai Watanabe 2, Bart Preneel 1, and Ingrid Verbauwhede 1 1 Dept. of Electrical
More informationCryptography MIS
Cryptography MIS-5903 http://community.mis.temple.edu/mis5903sec011s17/ Cryptography History Substitution Monoalphabetic Polyalphabetic (uses multiple alphabets) uses Vigenere Table Scytale cipher (message
More informationcube attack on stream cipher Trivium and quadraticity test
The cube attack on stream cipher Trivium and quadraticity tests Piotr Mroczkowski Janusz Szmidt Military Communication Institute Poland 17 sierpnia 2010 Cube Attack- Papers and Preprints Itai Dinur and
More informationPractical attacks on the Maelstrom-0 compression function
Practical attacks on the Maelstrom-0 compression function Stefan Kölbl, Florian Mendel Graz University of Technology, A-8010 Graz, Austria stefan.koelbl@student.tugraz.at Abstract. In this paper we present
More informationPrivate-Key Encryption
Private-Key Encryption Ali El Kaafarani Mathematical Institute Oxford University 1 of 50 Outline 1 Block Ciphers 2 The Data Encryption Standard (DES) 3 The Advanced Encryption Standard (AES) 4 Attacks
More informationCryptography Basics. IT443 Network Security Administration Slides courtesy of Bo Sheng
Cryptography Basics IT443 Network Security Administration Slides courtesy of Bo Sheng 1 Outline Basic concepts in cryptography systems Secret key cryptography Public key cryptography Hash functions 2 Encryption/Decryption
More informationChosen Ciphertext Attack on SSS
Chosen Ciphertext Attack on SSS Joan Daemen 1, Joseph Lano 2, and Bart Preneel 2 1 STMicroelectronics Belgium joan.daemen@st.com 2 Katholieke Universiteit Leuven, Dept. ESAT/SCD-COSIC {joseph.lano,bart.preneel}@esat.kuleuven.ac.be
More informationImproved Meet-in-the-Middle Attacks on AES-192 and PRINCE
Improved Meet-in-the-Middle Attacks on AES-92 and PRINCE Leibo Li,2, Keting Jia 2 and Xiaoyun Wang,2,3 Key Laboratory of Cryptologic Technology and Information Security, Ministry of Education, Shandong
More informationChaskey: An Efficient MAC Algorithm for 32-bit Microcontrollers
An extended abstract of this paper appears in Selected Areas in Cryptography - SAC 2014, Lecture Notes in Computer Science, A. Joux and A. Youssef, Springer-Verlag, 2014. This is the full version. Chaskey:
More informationA New Attack on the LEX Stream Cipher
A New Attack on the LEX Stream Cipher Orr Dunkelman, and Nathan Keller, École Normale Supérieure Département d Informatique, CNRS, INRIA 5 rue d Ulm, 50 Paris, France. orr.dunkelman@ens.fr Einstein Institute
More informationObservations and Attacks On The SHA-3 Candidate Blender
Observations and Attacks On The SHA-3 Candidate Blender Craig Newbold cjnewbold@googlemail.com Abstract 51 candidates have been accepted as first round candidates in NIST s SHA-3 competition, to decide
More informationMcOE: A Family of Almost Foolproof On-Line Authenticated Encryption Schemes
McOE: A Family of Almost Foolproof On-Line Authenticated Encryption Schemes Ewan Fleischmann Christian Forler Stefan Lucks Bauhaus-Universität Weimar FSE 2012 Fleischmann, Forler, Lucks. FSE 2012. McOE:
More informationBiclique Attack of the Full ARIA-256
Biclique Attack of the Full ARIA-256 Shao-zhen Chen Tian-min Xu Zhengzhou Information Science and Technology Institute Zhengzhou 450002, China January 8, 202 Abstract In this paper, combining the biclique
More informationImproved Attack on Full-round Grain-128
Improved Attack on Full-round Grain-128 Ximing Fu 1, and Xiaoyun Wang 1,2,3,4, and Jiazhe Chen 5, and Marc Stevens 6, and Xiaoyang Dong 2 1 Department of Computer Science and Technology, Tsinghua University,
More informationThe SHA-3 Process. Keccak & SHA-3 day Brussels, 27 March 2013
The SHA-3 Process Keccak & SHA-3 day Brussels, 27 March 2013 Timeline 05 06 07 08 09 10 11 12 13 Summer 2005: Attacks on MD5, RIPEMD, SHA-0, SHA-1 The Wang effect Before 2005 MD4 (Dobbertin) MD5 (Boss.,
More informationSome Cryptanalytic Results on Zipper Hash and Concatenated Hash
Some Cryptanalytic Results on Zipper Hash and Concatenated Hash Ashwin Jha and Mridul Nandi Indian Statistical Institute, Kolkata ashwin.jha1991@gmail.com, mridul.nandi@gmail.com Abstract. At SAC 2006,
More informationNew Time-Memory-Data Trade-Off Attack on the Estream Finalists and Modes of Operation of Block Ciphers
New Time-Memory-Data Trade-Off Attack on the Estream Finalists and Modes of Operation of Block Ciphers Khoongming Khoo DSO National Laboratories, 20 Science Park Drive, S118230, Singapore. kkhoongm@dso.org.sg
More informationImproved (Pseudo) Preimage Attack and Second Preimage Attack on Round-Reduced Grøstl Hash Function *
JOURNAL OF INFORMATION SCIENCE AND ENGINEERING 30, 1789-1806 (014) Improved (Pseudo) Preimage Attack and Second Preimage Attack on Round-Reduced Grøstl Hash Function * JIAN ZOU 1,, WENLING WU 1, SHUANG
More informationThe question paper contains 40 multiple choice questions with four choices and students will have to pick the correct one (each carrying ½ marks.).
Time: 3hrs BCA III Network security and Cryptography Examination-2016 Model Paper 2 M.M:50 The question paper contains 40 multiple choice questions with four choices and students will have to pick the
More informationCryptanalysis of hash functions with structures
Cryptanalysis of hash functions with structures Abstract. Hash function cryptanalysis has acquired many methods, tools and tricks from other areas, mostly block ciphers. In this paper another trick from
More informationMore Rounds, Less Security?
More Rounds, Less Security? Jian Guo 1, Jérémy Jean 1, Nicky Mouha 2,3, and Ivica Nikolić 1 1 Nanyang Technological University, Singapore 2 Dept. Electrical Engineering-ESAT/COSIC, KU Leuven, Leuven and
More informationOn Distinct Known Plaintext Attacks
On Distinct Known Plaintext Attacks Céline Blondeau, Kaisa Nyberg To cite this version: Céline Blondeau, Kaisa Nyberg. On Distinct Known Plaintext Attacks. Pascale Charpin, Nicolas Sendrier, Jean-Pierre
More informationCPSC 467b: Cryptography and Computer Security
CPSC 467b: Cryptography and Computer Security Instructor: Michael Fischer Lecture by Ewa Syta Lecture 5 January 23, 2012 CPSC 467b, Lecture 5 1/35 Advanced Encryption Standard AES Alternatives CPSC 467b,
More informationThe Rectangle Attack
The Rectangle Attack and Other Techniques for Cryptanalysis of Block Ciphers Orr Dunkelman Computer Science Dept. Technion joint work with Eli Biham and Nathan Keller Topics Block Ciphers Cryptanalysis
More informationKey Recovery Attacks of Practical Complexity on AES-256 Variants With Up To 10 Rounds
Key Recovery Attacks of Practical Complexity on AES-256 Variants With Up To 10 Rounds Alex Biryukov 1, Orr Dunkelman 2,4, Nathan Keller 3,4, Dmitry Khovratovich 1, and Adi Shamir 4 1 University of Luxembourg,
More informationCryptography and Network Security
Cryptography and Network Security Spring 2012 http://users.abo.fi/ipetre/crypto/ Lecture 14: Folklore, Course summary, Exam requirements Ion Petre Department of IT, Åbo Akademi University 1 Folklore on
More informationAttacks on Advanced Encryption Standard: Results and Perspectives
Attacks on Advanced Encryption Standard: Results and Perspectives Dmitry Microsoft Research 29 February 2012 Design Cryptanalysis history Advanced Encryption Standard Design Cryptanalysis history AES 2
More informationSome thoughts on Collision Attacks in the Hash Functions MD5, SHA-0 and SHA-1
Some thoughts on Collision Attacks in the Hash Functions MD5, SHA-0 and SHA-1 Praveen Gauravaram,William Millan and Juanma Gonzalez Neito Information Security Institute (ISI), QUT, Australia. {p.gauravaram,b.millan,j.gonzaleznieto}@isi.qut.edu.au
More informationCryptanalysis of the Speck Family of Block Ciphers
Cryptanalysis of the Speck Family of Block Ciphers Farzaneh Abed, Eik List, Stefan Lucks, and Jakob Wenzel Bauhaus-Universität Weimar, Germany {farzaneh.abed, eik.list, stefan.lucks, jakob.wenzel}@uni-weimar.de
More informationCipher Suite Configuration Mode Commands
The Cipher Suite Configuration Mode is used to configure the building blocks for SSL cipher suites, including the encryption algorithm, hash function, and key exchange. Important The commands or keywords/variables
More informationComp527 status items. Crypto Protocols, part 2 Crypto primitives. Bart Preneel July Install the smart card software. Today
Comp527 status items Crypto Protocols, part 2 Crypto primitives Today s talk includes slides from: Bart Preneel, Jonathan Millen, and Dan Wallach Install the smart card software Bring CDs back to Dan s
More informationDesign of block ciphers
Design of block ciphers Joan Daemen STMicroelectronics and Radboud University University of Zagreb Zagreb, Croatia, March 23, 2016 1 / 49 Outline 1 Data Encryption Standard 2 Wide Trail Strategy 3 Rijndael
More informationCryptanalysis of the GOST Hash Function
Cryptanalysis of the GOST Hash Function Florian Mendel, Norbert Pramstaller, and Christian Rechberger Institute for Applied Information Processing and Communications (IAIK) - Krypto Group Faculty of Computer
More informationAlmost Universal Forgery Attacks on AES-Based MAC s
Noname manuscript No. (will be inserted by the editor) Almost Universal Forgery Attacks on AES-Based MAC s Orr Dunkelman Nathan Keller Adi Shamir the date of receipt and acceptance should be inserted later
More informationMILP-aided Cube-attack-like Cryptanalysis on Keccak Keyed Modes
MILP-aided Cube-attack-like Cryptanalysis on Keccak Keyed Modes Wenquan Bi 1, Xiaoyang Dong 2, Zheng Li 1, Rui Zong 1, and Xiaoyun Wang 1,2 1 Key Laboratory of Cryptologic Technology and Information Security,
More informationCryptography for Resource Constrained Devices: A Survey
Cryptography for Resource Constrained Devices: A Survey Jacob John Dept. of Computer Engineering Sinhgad Institute of Technology Pune, India. jj31270@yahoo.co.in Abstract Specifically designed and developed
More informationCPSC 467b: Cryptography and Computer Security
CPSC 467b: Cryptography and Computer Security Instructor: Michael Fischer Lecture by Ewa Syta Lecture 5a January 29, 2013 CPSC 467b, Lecture 5a 1/37 Advanced Encryption Standard AES Alternatives CPSC 467b,
More informationLecture 1 Applied Cryptography (Part 1)
Lecture 1 Applied Cryptography (Part 1) Patrick P. C. Lee Tsinghua Summer Course 2010 1-1 Roadmap Introduction to Security Introduction to Cryptography Symmetric key cryptography Hash and message authentication
More informationChaskey: a MAC Algorithm for Microcontrollers Status Update and Proposal of Chaskey-12
Chaskey: a MAC Algorithm for Microcontrollers Status Update and Proposal of Chaskey-12 Nicky Mouha 1,2 1 Dept. Electrical Engineering-ESAT/COSIC, KU Leuven, Leuven and iminds, Ghent, Belgium. 2 Project-team
More informationImproved Impossible Differential Attacks against Round-Reduced LBlock
Improved Impossible Differential Attacks against Round-Reduced LBlock Christina Boura, Marine Minier, María Naya-Plasencia, Valentin Suder To cite this version: Christina Boura, Marine Minier, María Naya-Plasencia,
More informationOn the (In)Security of IDEA in Various Hashing Modes
On the (In)Security of IDEA in Various Hashing Modes Lei Wei 1, Thomas Peyrin 1, Przemys law Soko lowski 2, San Ling 1, Josef Pieprzyk 2, and Huaxiong Wang 1 1 Division of Mathematical Sciences, School
More informationCSC 580 Cryptography and Computer Security
CSC 580 Cryptography and Computer Security Cryptographic Hash Functions (Chapter 11) March 22 and 27, 2018 Overview Today: Quiz (based on HW 6) Graded HW 2 due Grad/honors students: Project topic selection
More informationIntroduction to Cryptography. Lecture 6
Introduction to Cryptography Lecture 6 Benny Pinkas page 1 1 Data Integrity, Message Authentication Risk: an active adversary might change messages exchanged between Alice and Bob M Alice M M M Bob Eve
More informationBLAKE2: simpler, smaller, fast as MD5
BLAKE2: simpler, smaller, fast as MD5 2012.12.23 https://blake2.net Jean-Philippe Aumasson (@aumasson) Samuel Neves (@sevenps) Zooko Wilcox-O Hearn (@zooko) Christian Winnerlein (@codesinchaos) Abstract.
More informationLightweight Cryptography on ARM
Lightweight Cryptography on ARM Software implementation of block ciphers and ECC Rafael Cruz, Tiago Reis, Diego F. Aranha, Julio López, Harsh Kupwade Patil University of Campinas, LG Electronics Inc. Introduction
More informationAdvanced Differential Cryptanalysis and GOST Cipher
Advanced Differential Cryptanalysis and GOST Cipher Nicolas T. Courtois Theodosis Mourouzis University College London, UK Abstract Differential Cryptanalysis (DC) is one of the oldest known attacks on
More informationBCA III Network security and Cryptography Examination-2016 Model Paper 1
Time: 3hrs BCA III Network security and Cryptography Examination-2016 Model Paper 1 M.M:50 The question paper contains 40 multiple choice questions with four choices and student will have to pick the correct
More information