Symmetric Cryptography 2016

Size: px
Start display at page:

Download "Symmetric Cryptography 2016"

Transcription

1 Symmetric Cryptography 2016 Monday, January 11 7:30 Session Chair: Frederik Armknecht Dynamic Cube Attacks Revisited, with Applications to Grain128a Another View of the Division Property Invariant Subspace Attack Against Full Midori64 Session Chair: Yu Sasaki Willi Meier Anne Canteaut Yu Sasaki 12:15 On GCMSIV Tetsu Iwata RIV and Resilient Authenticated Encryption Stefan Lucks Session Chair: Anne Canteaut 14:00 Memory Efficient Algorithms for Finding Needles in Haystacks Adi Shamir Bit Cryptanalysis on Symmetric Ciphers Xiaoyun Wang The Problem of Estimating the Variance of the Linear Cryptanalysis Test Statistic and Cake Kaisa Nyberg Session Chair/Moderator: Dan Bernstein (17:30) 18:00 1 Separating Modes and Primitives in CAESAR Joan Daemen Discussion on CAESAR

2 Tuesday, January 12 7:30 Session Chair: Jooyoung Lee KeyAlternating PRFs and Provable Security of Stream Ciphers against TimeMemoryData Tradeoff Attacks Improved Masking for Tweakable Blockciphers with Applications to Authenticated Encryption Tweaking EvenMansour Ciphers Session Chair: Bart Mennink Matthias Krause Bart Mennink Benoît Cogliati Indifferentiability of ConfusionDiffusion Networks John Steinberger 60 min 12:15 Moderation: Adi Shamir 14:30 Discussion on Attacks and Cake Session Chair: John Steinberger 18:00 18:00 1 EvenMansour type ciphers based on involutions Jooyoung Lee EvenMansour cipher analysis reduced to the generalized birthday problem Transitivity aspects of the (iterated) Even Mansour cipher Ivica Nikolic Ernst Schulte Geers

3 Wednesday, January 13 7:30 Session Chair: Nicky Mouha Polytopic cryptanalysis Tyge Tiessen Linear Cryptanalysis: Some bizarre bias distributions Universal Multidimensional and Multiple Zero Correlation Cryptanalysis KeyRecovery Attack on the ASASA Cryptosystem with Expanding SBoxes Gregor Leander Meiqin Wang Henri Gilbert 10 min Session Chair: Christian Rechberger 12:15 LowEnergy Block Ciphers Some Results on the GOST Block Ciphers Andrey Bogdanov Orr Dunkelman Hike and Cake Free for discussions 18:00 1

4 Thursday, January 14 7:30 Session Chair/Moderator: Orr Dunkelman SBox ReverseEngineering: Recovering Design Criteria, Hidden Structures and New Boolean Function Results Léo Perrin Simpira Nicky Mouha Discussion on Secret Agency Crypto Standards Session Chair: Gregor Leander 40 min 12:15 New Attacks on Hash function Combiners Itai Dinur Transcipt Collision Attacks against TLS Gaëtan Leurent Session Chair: 14:00 Egalitarian computing: how to establish a level playing field with hash functions and NPhard problems Dmitry Khovratovich New Publication Model for FSE Anne Canteaut MAC with low computation overhead Kazuhiko Minematsu and Cake Session Chair: Bart Preneel 18:00 18:00 1 Some Application of Symmetric Cryptography in Multi Party Computation A new cryptographic hash function design below 1 cycle per byte for short inputs Revisiting Structure Graph and Its Applications to CBCMAC and EMAC Second Preimage Attacks against Dithered Hash Functions with Practical Online Memory Complexity Elena Andreeva Christian Rechberger Mridul Nandi Orr Dunkelman 10 min

5 Friday, January 15 7:30 9:20 10:35 10:35 Provable Security Evaluation of Structures against Impossible Differential Cryptanalysis On Ciphers that Continuously Access the NonVolatile Key Directly Evaluating Multicollisions and Improving Security Bounds Session Chair: Stefan Lucks Jian Guo Frederik Armknecht Kan Yasuda Session Chair: Kan Yasuda 15 min 12:15 Some challenges in heavyweight cipher design Mirror Theory and Cryptography Dan Bernstein Jacques Patarin

Fast Software Encryption 2017

Fast Software Encryption 2017 Fast Software Encryption 2017 Program All technical sessions and coffee breaks take place in the Hall D7 at Tokyo International Forum. Lunch is available in the Hall D5. All talks are 20 minutes including

More information

Meet-in-the-Middle Preimage Attacks on AES Hashing Modes and an Application to Whirlpool

Meet-in-the-Middle Preimage Attacks on AES Hashing Modes and an Application to Whirlpool Meet-in-the-Middle Preimage Attacks on AES Hashing Modes and an Application to Whirlpool Yu Sasaki NTT Information Sharing Platform Laboratories, NTT Corporation 3-9-11 Midoricho, Musashino-shi, Tokyo

More information

First practical results on reduced-round Keccak Unaligned rebound attack. María Naya-Plasencia INRIA Paris-Rocquencourt, France

First practical results on reduced-round Keccak Unaligned rebound attack. María Naya-Plasencia INRIA Paris-Rocquencourt, France First practical results on reduced-round Keccak Unaligned rebound attack María Naya-Plasencia INRIA Paris-Rocquencourt, France Outline Introduction First Practical Results [NP-Röck-Meier11] CP-Kernel:

More information

Narrow-Bicliques: Cryptanalysis of Full IDEA. Gaetan Leurent, University of Luxembourg Christian Rechberger, DTU MAT

Narrow-Bicliques: Cryptanalysis of Full IDEA. Gaetan Leurent, University of Luxembourg Christian Rechberger, DTU MAT Narrow-Bicliques: Cryptanalysis of Full IDEA Dmitry Khovratovich, h Microsoft Research Gaetan Leurent, University of Luxembourg Christian Rechberger, DTU MAT Cryptanalysis 101 Differential attacks Linear

More information

Blockcipher-based Authentcated Encryption: How Small Can We Go? CHES 2017, Taipei, Taiwan

Blockcipher-based Authentcated Encryption: How Small Can We Go? CHES 2017, Taipei, Taiwan Blockcipher-based Authentcated Encryption: How Small Can We Go? Avik Chakraborti (NTT Secure Platform laboratories, Japan) Tetsu Iwata (Nagoya University, Japan) Kazuhiko Minematsu (NEC Corporation, Japan)

More information

Cryptanalysis of Iterated Even-Mansour Schemes with Two Keys

Cryptanalysis of Iterated Even-Mansour Schemes with Two Keys Cryptanalysis of Iterated Even-Mansour Schemes with Two Keys Itai Dinur 1,, Orr Dunkelman 2,3,, Nathan Keller 3,4,, and Adi Shamir 4 1 Département d Informatique, École Normale Supérieure, Paris, France

More information

Improved Linear Sieving Techniques with Applications to Step-Reduced LED-64

Improved Linear Sieving Techniques with Applications to Step-Reduced LED-64 Improved Linear Sieving Techniques with Applications to Step-Reduced LED-64 Itai Dinur 1,, Orr Dunkelman 2,4,, Nathan Keller 3,4,, and Adi Shamir 4 1 Département d Informatique, École Normale Supérieure,

More information

Biclique Cryptanalysis of TWINE

Biclique Cryptanalysis of TWINE Biclique Cryptanalysis of TWINE Mustafa Çoban 1,2, Ferhat Karakoç 1,3, and Özkan Boztaş 1,4 1 TÜBİTAK BİLGEM UEKAE, 41470, Gebze, Kocaeli, Turkey {mustafacoban, ferhatk, ozkan}@uekae.tubitak.gov.tr 2 Sakarya

More information

Updates on CLOC and SILC Version 3

Updates on CLOC and SILC Version 3 Updates on CLOC and SILC Version 3 Tetsu Iwata*, Kazuhiko Minematsu, Jian Guo, Sumio Morioka, and Eita Kobayashi DIAC 2016 September 26, 2016, Nagoya, Japan * Supported in part by JSPS KAKENHI, Grant in

More information

A Meet in the Middle Attack on Reduced Round Kuznyechik

A Meet in the Middle Attack on Reduced Round Kuznyechik IEICE TRANS. FUNDAMENTALS, VOL.Exx??, NO.xx XXXX 200x 1 LETTER Special Section on Cryptography and Information Security A Meet in the Middle Attack on Reduced Round Kuznyechik Riham ALTAWY a), Member and

More information

Block Ciphers that are Easier to Mask How Far Can we Go?

Block Ciphers that are Easier to Mask How Far Can we Go? Block Ciphers that are Easier to Mask How Far Can we Go? Benoît Gérard, Vincent Grosso, María Naya-Plasencia, François-Xavier Standaert DGA & UCL Crypto Group & INRIA CHES 2013 Santa Barbara, USA Block

More information

A Splice-and-Cut Cryptanalysis of the AES

A Splice-and-Cut Cryptanalysis of the AES A Splice-and-Cut Cryptanalysis of the AES Dmitry Khovratovich 1 and Christian Rechberger 2 1 Microsoft Research Redmond 2 ENS Paris and Chaire France Telecom May 28, 2011 Abstract Since Rijndael was chosen

More information

On authenticated encryption and the CAESAR competition

On authenticated encryption and the CAESAR competition On authenticated encryption and the CAESAR competition Joan Daemen STMicroelectronics and Radboud University Crypto summer school 2015 Šibenik, Croatia, May 31 - June 5, 2015 1 / 39 What is authenticated

More information

APE: Authenticated Permutation-Based Encryption for Lightweight Cryptography

APE: Authenticated Permutation-Based Encryption for Lightweight Cryptography APE: Authenticated Permutation-Based Encryption for Lightweight Cryptography Elena Andreeva, Begül Bilgin, Andrey Bogdanov, Atul Luykx, Bart Mennink, Nicky Mouha, Kan Yasuda KU Leuven, UTwente, DTU, NTT

More information

Permutation-based symmetric cryptography

Permutation-based symmetric cryptography Permutation-based symmetric cryptography Guido Bertoni 1 Joan Daemen 1 Michaël Peeters 2 Gilles Van Assche 1 1 STMicroelectronics 2 NXP Semiconductors Keccak & SHA-3 Day Université Libre de Bruxelles March

More information

Cryptanalysis vs. Reality

Cryptanalysis vs. Reality 1 / 67 Cryptanalysis vs. Reality Jean-Philippe Aumasson http://131002.net @aumasson Cryptanalysis is the study of methods for obtaining the meaning of encrypted information without access to the secret

More information

Distinguisher and Related-Key Attack on the Full AES-256

Distinguisher and Related-Key Attack on the Full AES-256 Distinguisher and Related-Key Attack on the Full AES-256 Alex Biryukov, Dmitry Khovratovich, Ivica Nikolić University of Luxembourg {alex.biryukov, dmitry.khovratovich, ivica.nikolic@uni.lu} Abstract.

More information

Improved Linear Sieving Techniques with Applications to Step-Reduced LED-64

Improved Linear Sieving Techniques with Applications to Step-Reduced LED-64 Improved Linear Sieving Techniques with Applications to Step-Reduced LED-64 Itai Dinur 1, Orr Dunkelman 2,4, Nathan eller 3 and Adi Shamir 4 1 École normale supérieure, France 2 University of Haifa, Israel

More information

Report regarding the winter school on Hash 3 : Proofs, Analysis and Implementation

Report regarding the winter school on Hash 3 : Proofs, Analysis and Implementation Report regarding the winter school on Hash 3 : Proofs, Analysis and Implementation Praveen Gauravaram Department of Mathematics, Technical University of Denmark Building S303, Matematiktorvet Kgs.Lyngby,

More information

NEW COMPRESSION FUNCTION TO SHA-256 BASED ON THE TECHNIQUES OF DES.

NEW COMPRESSION FUNCTION TO SHA-256 BASED ON THE TECHNIQUES OF DES. NEW COMPRESSION FUNCTION TO SHA-256 BASED ON THE TECHNIQUES OF DES. 1 ZAKARIA KADDOURI, 2 FOUZIA OMARY, 3 ABDOLLAH ABOUCHOUAR, 4 MOHSSIN DAARI, 5 KHADIJA ACHKOUN. LRI Laboratory (Ex: Networks and Data

More information

symmetric cryptography s642 computer security adam everspaugh

symmetric cryptography s642 computer security adam everspaugh symmetric cryptography s642 adam everspaugh ace@cs.wisc.edu computer security Announcement Midterm next week: Monday, March 7 (in-class) Midterm Review session Friday: March 4 (here, normal class time)

More information

Finding Second Preimages of Short Messages for Hamsi-256

Finding Second Preimages of Short Messages for Hamsi-256 Finding Second Preimages of Short Messages for Hamsi-256 Thomas Fuhr ANSSI, Paris, France and TELECOM-ParisTech, Paris, France thomas.fuhr@ssi.gouv.fr Abstract. In this paper we study the second preimage

More information

09031 Abstracts Collection Symmetric Cryptography. Dagstuhl Seminar

09031 Abstracts Collection Symmetric Cryptography. Dagstuhl Seminar 09031 Abstracts Collection Symmetric Cryptography Dagstuhl Seminar Helena Handschuh 1, Stefan Lucks 2, Bart Preneel 3 and Phillip Rogaway 4 1 Spansion - Levallois-Perret, F helena.handschuh@spansion.com

More information

CLOC: Authenticated Encryption

CLOC: Authenticated Encryption CLOC: Authenticated Encryption for Short Input Tetsu Iwata, Nagoya University Kazuhiko Minematsu, NEC Corporation Jian Guo, Nanyang Technological University Sumio Morioka, NEC Europe Ltd. FSE 2014 March

More information

Recent Meet-in-the-Middle Attacks on Block Ciphers

Recent Meet-in-the-Middle Attacks on Block Ciphers ASK 2012 Nagoya, Japan Recent Meet-in-the-Middle Attacks on Block Ciphers Takanori Isobe Sony Corporation (Joint work with Kyoji Shibutani) Outline 1. Meet-in-the-Middle (MitM) attacks on Block ciphers

More information

Evaluation of security level of CLEFIA

Evaluation of security level of CLEFIA Evaluation of security level of CLEFIA An anonymous reviewer Version 1.0 January 25, 2011 1 Evaluation of security level of CLEFIA 1 Contents Executive Summary 3 References 4 1 Introduction 8 2 CLEFIA

More information

symmetric cryptography s642 computer security adam everspaugh

symmetric cryptography s642 computer security adam everspaugh symmetric cryptography s642 adam everspaugh ace@cs.wisc.edu computer security Announcements Midterm next week: Monday, March 7 (in-class) Midterm Review session Friday: March 4 (here, normal class time)

More information

CUBE-TYPE ALGEBRAIC ATTACKS ON WIRELESS ENCRYPTION PROTOCOLS

CUBE-TYPE ALGEBRAIC ATTACKS ON WIRELESS ENCRYPTION PROTOCOLS CUBE-TYPE ALGEBRAIC ATTACKS ON WIRELESS ENCRYPTION PROTOCOLS George W. Dinolt, James Bret Michael, Nikolaos Petrakos, Pantelimon Stanica Short-range (Bluetooth) and to so extent medium-range (WiFi) wireless

More information

PAPER On Design of Robust Lightweight Stream Cipher with Short Internal State

PAPER On Design of Robust Lightweight Stream Cipher with Short Internal State IEICE TRANS.??, VOL.Exx??, NO.xx XXXX 200x 1 PAPER On Design of Robust Lightweight Stream Cipher with Short Internal State Subhadeep BANIK, Takanori ISOBE, Nonmembers, and Masakatu MORII, Senior Member

More information

Updates on CLOC and SILC

Updates on CLOC and SILC Updates on CLOC and SILC Tetsu Iwata*, Kazuhiko Minematsu, Jian Guo, Sumio Morioka, and Eita Kobayashi DIAC 2015 September 28, 2015, Singapore * Supported in part by JSPS KAKENHI, Grant in Aid for Scientific

More information

Match Box Meet-in-the-Middle Attack against KATAN

Match Box Meet-in-the-Middle Attack against KATAN Match Box Meet-in-the-Middle Attack against KATAN Thomas Fuhr and Brice Minaud ANSSI, 51, boulevard de la Tour-Maubourg, 75700 Paris 07 SP, France thomas.fuhr@ssi.gouv.fr,brice.minaud@gmail.com Abstract.

More information

Hash Function. Guido Bertoni Luca Breveglieri. Fundations of Cryptography - hash function pp. 1 / 18

Hash Function. Guido Bertoni Luca Breveglieri. Fundations of Cryptography - hash function pp. 1 / 18 Hash Function Guido Bertoni Luca Breveglieri Fundations of Cryptography - hash function pp. 1 / 18 Definition a hash function H is defined as follows: H : msg space digest space the msg space is the set

More information

3 rd SKINNY Breaking Competition

3 rd SKINNY Breaking Competition 3 rd SKINNY Breaking Competition C. Beierle, J. Jean, S. Kӧlbl, G. Leander, A. Moradi, T. Peyrin, Y. Sasaki, P. Sasdrich and S.M. Sim Eurocrypt 2018 Rump Session@ Tel Aviv 01/May/2018 SKINNY Overview Lightweight

More information

The JAMBU Lightweight Authentication Encryption Mode (v2)

The JAMBU Lightweight Authentication Encryption Mode (v2) The JAMBU Lightweight Authentication Encryption Mode (v2) 29 Aug, 2015 Designers: Hongjun Wu, Tao Huang Submitters: Hongjun Wu, Tao Huang Contact: wuhongjun@gmail.com Division of Mathematical Sciences

More information

Design and Analysis of a New Hash Function Gear

Design and Analysis of a New Hash Function Gear Design and Analysis of a New Hash Function Gear Mohammad A. AlAhmad Public Authority for Applied Education and Training College of Basic Education Computer Science Department P.O.Box 34567 Adaliyah, 73205

More information

Cryptanalysis vs. Reality. Small Cryptanalysis

Cryptanalysis vs. Reality. Small Cryptanalysis 1 / 34 Cryptanalysis vs. Reality + Small Cryptanalysis Jean-Philippe Aumasson http://131002.net @aumasson 2 / 34 Cryptanalysis used to be connected to reality (replica of a Turing s bombe used to break

More information

Security Analysis of Extended Sponge Functions. Thomas Peyrin

Security Analysis of Extended Sponge Functions. Thomas Peyrin Security Analysis of Extended Sponge Functions Hash functions in cryptology: theory and practice Leiden, Netherlands Orange Labs University of Versailles June 4, 2008 Outline 1 The Extended Sponge Functions

More information

The SKINNY Family of Lightweight Tweakable Block Ciphers

The SKINNY Family of Lightweight Tweakable Block Ciphers The SKINNY Family of Lightweight Tweakable Block Ciphers Jérémy Jean joint work with: Christof Beierle Stefan Kölbl Gregor Leander Amir Moradi Thomas Peyrin Yu Sasaki Pascal Sasdrich Siang Meng Sim CRYPTO

More information

More engineering. considerations for the SHA-3 hash function

More engineering. considerations for the SHA-3 hash function More engineering considerations for the SHA-3 hash function Jean-Philippe Aumasson Dan Bernstein Charles Bouillaguet Daniel Brown Orr Dunkelman Sebastiaan Indesteege Emilia Käsper Dmitry Khovratovich Jongsung

More information

Early Symmetric Crypto ESC 2015

Early Symmetric Crypto ESC 2015 January 12 16, 2015 Clervaux Luxembourg Early Symmetric Crypto ESC 2015 Program Chairs Alex Biryukov Joan Daemen Stefan Lucks Serge Vaudenay University of Luxembourg, Luxembourg STMicroelectronics Bauhaus-Universität,

More information

H must be collision (2n/2 function calls), 2nd-preimage (2n function calls) and preimage resistant (2n function calls)

H must be collision (2n/2 function calls), 2nd-preimage (2n function calls) and preimage resistant (2n function calls) What is a hash function? mapping of: {0, 1} {0, 1} n H must be collision (2n/2 function calls), 2nd-preimage (2n function calls) and preimage resistant (2n function calls) The Merkle-Damgård algorithm

More information

R-MAC A lightwheight authentication protocol for RFID Tags

R-MAC A lightwheight authentication protocol for RFID Tags R-MAC A lightwheight authentication protocol for RFID Tags Ahmad Khoureich Ka Dept. of Computer Science, Université Alioune Diop de Bambey, Sénégal, ahmadkhoureich.ka@uadb.edu.sn Abstract. Nowadays, RFID

More information

Weak Keys. References

Weak Keys. References Weak Keys The strength of the encryption function E K (P) may differ significantly for different keys K. If for some set WK of keys the encryption function is much weaker than for the others this set is

More information

With Intel C++ v for Windows it achieves the following speeds:

With Intel C++ v for Windows it achieves the following speeds: OFFICIAL COMMENT: EDON-R 1 of 1 12/15/2008 9:45 AM Subject: OFFICIAL COMMENT: EDON-R From: "Danilo Gligoroski" Date: Mon, 15 Dec 2008 13:27:30 +0100 To:

More information

POMELO A Password Hashing Algorithm (Version 2)

POMELO A Password Hashing Algorithm (Version 2) POMELO A Password Hashing Algorithm (Version 2) Designer and Submitter: Hongjun Wu Division of Mathematical Sciences Nanyang Technological University wuhongjun@gmail.com (last modified on 2015.04.13) Contents

More information

Biclique Cryptanalysis of the Full AES

Biclique Cryptanalysis of the Full AES Biclique Cryptanalysis of the Full AES Andrey Bogdanov, Dmitry Khovratovich, and Christian Rechberger K.U. Leuven, Belgium; Microsoft Research Redmond, USA; ENS Paris and Chaire France Telecom, France

More information

AEGIS. A Fast Authenticated Encryption Algorithm. Nanyang Technological University KU Leuven and iminds DIAC 2014 AEGIS 1

AEGIS. A Fast Authenticated Encryption Algorithm. Nanyang Technological University KU Leuven and iminds DIAC 2014 AEGIS 1 AEGIS A Fast Authenticated Encryption Algorithm Hongjun Wu Bart Preneel Nanyang Technological University KU Leuven and iminds 1 AEGIS: A shield carried by Athena and Zeus 2 Different Design Approaches:

More information

Two Attacks Against the HBB Stream Cipher

Two Attacks Against the HBB Stream Cipher Two Attacks Against the HBB Stream Cipher Antoine Joux 1 and Frédéric Muller 2 1 DGA and Univ. Versailles St-Quentin Antoine.Joux@m4x.org 2 DCSSI Crypto Lab Frederic.Muller@sgdn.pm.gouv.fr Abstract. Hiji-Bij-Bij

More information

MergeMAC: A MAC for Authentication with Strict Time Constraints and Limited Bandwidth

MergeMAC: A MAC for Authentication with Strict Time Constraints and Limited Bandwidth MergeMAC: A MAC for Authentication with Strict Time Constraints and Limited Bandwidth Ralph Ankele 1, Florian Böhl 2, Simon Friedberger 2 1 Royal Holloway University of London, United Kingdom. ralph.ankele.2015@rhul.ac.uk

More information

Skein. John Kevin Hicks

Skein. John Kevin Hicks Skein John Kevin Hicks 2 Outline Introduction Skein Overview Threefish Block Cipher Unique Block Iteration Optional Argument System Skein Performance Security Claims and Current Cryptanalysis Conclusions

More information

Cryptanalysis of TWIS Block Cipher

Cryptanalysis of TWIS Block Cipher Cryptanalysis of TWIS Block Cipher Onur Koçak and Neşe Öztop Institute of Applied Mathematics, Middle East Technical University, Turkey {onur.kocak,noztop}@metu.edu.tr Abstract. TWIS is a 128-bit lightweight

More information

EEC-682/782 Computer Networks I

EEC-682/782 Computer Networks I EEC-682/782 Computer Networks I Lecture 23 Wenbing Zhao wenbingz@gmail.com http://academic.csuohio.edu/zhao_w/teaching/eec682.htm (Lecture nodes are based on materials supplied by Dr. Louise Moser at UCSB

More information

9/30/2016. Cryptography Basics. Outline. Encryption/Decryption. Cryptanalysis. Caesar Cipher. Mono-Alphabetic Ciphers

9/30/2016. Cryptography Basics. Outline. Encryption/Decryption. Cryptanalysis. Caesar Cipher. Mono-Alphabetic Ciphers Cryptography Basics IT443 Network Security Administration Slides courtesy of Bo Sheng Basic concepts in cryptography systems Secret cryptography Public cryptography 1 2 Encryption/Decryption Cryptanalysis

More information

Chaskey: An Efficient MAC Algorithm for 32-bit Microcontrollers

Chaskey: An Efficient MAC Algorithm for 32-bit Microcontrollers Chaskey: An Efficient MAC Algorithm for 32-bit Microcontrollers Nicky Mouha 1(B), Bart Mennink 1, Anthony Van Herrewege 1, Dai Watanabe 2, Bart Preneel 1, and Ingrid Verbauwhede 1 1 Dept. of Electrical

More information

Cryptography MIS

Cryptography MIS Cryptography MIS-5903 http://community.mis.temple.edu/mis5903sec011s17/ Cryptography History Substitution Monoalphabetic Polyalphabetic (uses multiple alphabets) uses Vigenere Table Scytale cipher (message

More information

cube attack on stream cipher Trivium and quadraticity test

cube attack on stream cipher Trivium and quadraticity test The cube attack on stream cipher Trivium and quadraticity tests Piotr Mroczkowski Janusz Szmidt Military Communication Institute Poland 17 sierpnia 2010 Cube Attack- Papers and Preprints Itai Dinur and

More information

Practical attacks on the Maelstrom-0 compression function

Practical attacks on the Maelstrom-0 compression function Practical attacks on the Maelstrom-0 compression function Stefan Kölbl, Florian Mendel Graz University of Technology, A-8010 Graz, Austria stefan.koelbl@student.tugraz.at Abstract. In this paper we present

More information

Private-Key Encryption

Private-Key Encryption Private-Key Encryption Ali El Kaafarani Mathematical Institute Oxford University 1 of 50 Outline 1 Block Ciphers 2 The Data Encryption Standard (DES) 3 The Advanced Encryption Standard (AES) 4 Attacks

More information

Cryptography Basics. IT443 Network Security Administration Slides courtesy of Bo Sheng

Cryptography Basics. IT443 Network Security Administration Slides courtesy of Bo Sheng Cryptography Basics IT443 Network Security Administration Slides courtesy of Bo Sheng 1 Outline Basic concepts in cryptography systems Secret key cryptography Public key cryptography Hash functions 2 Encryption/Decryption

More information

Chosen Ciphertext Attack on SSS

Chosen Ciphertext Attack on SSS Chosen Ciphertext Attack on SSS Joan Daemen 1, Joseph Lano 2, and Bart Preneel 2 1 STMicroelectronics Belgium joan.daemen@st.com 2 Katholieke Universiteit Leuven, Dept. ESAT/SCD-COSIC {joseph.lano,bart.preneel}@esat.kuleuven.ac.be

More information

Improved Meet-in-the-Middle Attacks on AES-192 and PRINCE

Improved Meet-in-the-Middle Attacks on AES-192 and PRINCE Improved Meet-in-the-Middle Attacks on AES-92 and PRINCE Leibo Li,2, Keting Jia 2 and Xiaoyun Wang,2,3 Key Laboratory of Cryptologic Technology and Information Security, Ministry of Education, Shandong

More information

Chaskey: An Efficient MAC Algorithm for 32-bit Microcontrollers

Chaskey: An Efficient MAC Algorithm for 32-bit Microcontrollers An extended abstract of this paper appears in Selected Areas in Cryptography - SAC 2014, Lecture Notes in Computer Science, A. Joux and A. Youssef, Springer-Verlag, 2014. This is the full version. Chaskey:

More information

A New Attack on the LEX Stream Cipher

A New Attack on the LEX Stream Cipher A New Attack on the LEX Stream Cipher Orr Dunkelman, and Nathan Keller, École Normale Supérieure Département d Informatique, CNRS, INRIA 5 rue d Ulm, 50 Paris, France. orr.dunkelman@ens.fr Einstein Institute

More information

Observations and Attacks On The SHA-3 Candidate Blender

Observations and Attacks On The SHA-3 Candidate Blender Observations and Attacks On The SHA-3 Candidate Blender Craig Newbold cjnewbold@googlemail.com Abstract 51 candidates have been accepted as first round candidates in NIST s SHA-3 competition, to decide

More information

McOE: A Family of Almost Foolproof On-Line Authenticated Encryption Schemes

McOE: A Family of Almost Foolproof On-Line Authenticated Encryption Schemes McOE: A Family of Almost Foolproof On-Line Authenticated Encryption Schemes Ewan Fleischmann Christian Forler Stefan Lucks Bauhaus-Universität Weimar FSE 2012 Fleischmann, Forler, Lucks. FSE 2012. McOE:

More information

Biclique Attack of the Full ARIA-256

Biclique Attack of the Full ARIA-256 Biclique Attack of the Full ARIA-256 Shao-zhen Chen Tian-min Xu Zhengzhou Information Science and Technology Institute Zhengzhou 450002, China January 8, 202 Abstract In this paper, combining the biclique

More information

Improved Attack on Full-round Grain-128

Improved Attack on Full-round Grain-128 Improved Attack on Full-round Grain-128 Ximing Fu 1, and Xiaoyun Wang 1,2,3,4, and Jiazhe Chen 5, and Marc Stevens 6, and Xiaoyang Dong 2 1 Department of Computer Science and Technology, Tsinghua University,

More information

The SHA-3 Process. Keccak & SHA-3 day Brussels, 27 March 2013

The SHA-3 Process. Keccak & SHA-3 day Brussels, 27 March 2013 The SHA-3 Process Keccak & SHA-3 day Brussels, 27 March 2013 Timeline 05 06 07 08 09 10 11 12 13 Summer 2005: Attacks on MD5, RIPEMD, SHA-0, SHA-1 The Wang effect Before 2005 MD4 (Dobbertin) MD5 (Boss.,

More information

Some Cryptanalytic Results on Zipper Hash and Concatenated Hash

Some Cryptanalytic Results on Zipper Hash and Concatenated Hash Some Cryptanalytic Results on Zipper Hash and Concatenated Hash Ashwin Jha and Mridul Nandi Indian Statistical Institute, Kolkata ashwin.jha1991@gmail.com, mridul.nandi@gmail.com Abstract. At SAC 2006,

More information

New Time-Memory-Data Trade-Off Attack on the Estream Finalists and Modes of Operation of Block Ciphers

New Time-Memory-Data Trade-Off Attack on the Estream Finalists and Modes of Operation of Block Ciphers New Time-Memory-Data Trade-Off Attack on the Estream Finalists and Modes of Operation of Block Ciphers Khoongming Khoo DSO National Laboratories, 20 Science Park Drive, S118230, Singapore. kkhoongm@dso.org.sg

More information

Improved (Pseudo) Preimage Attack and Second Preimage Attack on Round-Reduced Grøstl Hash Function *

Improved (Pseudo) Preimage Attack and Second Preimage Attack on Round-Reduced Grøstl Hash Function * JOURNAL OF INFORMATION SCIENCE AND ENGINEERING 30, 1789-1806 (014) Improved (Pseudo) Preimage Attack and Second Preimage Attack on Round-Reduced Grøstl Hash Function * JIAN ZOU 1,, WENLING WU 1, SHUANG

More information

The question paper contains 40 multiple choice questions with four choices and students will have to pick the correct one (each carrying ½ marks.).

The question paper contains 40 multiple choice questions with four choices and students will have to pick the correct one (each carrying ½ marks.). Time: 3hrs BCA III Network security and Cryptography Examination-2016 Model Paper 2 M.M:50 The question paper contains 40 multiple choice questions with four choices and students will have to pick the

More information

Cryptanalysis of hash functions with structures

Cryptanalysis of hash functions with structures Cryptanalysis of hash functions with structures Abstract. Hash function cryptanalysis has acquired many methods, tools and tricks from other areas, mostly block ciphers. In this paper another trick from

More information

More Rounds, Less Security?

More Rounds, Less Security? More Rounds, Less Security? Jian Guo 1, Jérémy Jean 1, Nicky Mouha 2,3, and Ivica Nikolić 1 1 Nanyang Technological University, Singapore 2 Dept. Electrical Engineering-ESAT/COSIC, KU Leuven, Leuven and

More information

On Distinct Known Plaintext Attacks

On Distinct Known Plaintext Attacks On Distinct Known Plaintext Attacks Céline Blondeau, Kaisa Nyberg To cite this version: Céline Blondeau, Kaisa Nyberg. On Distinct Known Plaintext Attacks. Pascale Charpin, Nicolas Sendrier, Jean-Pierre

More information

CPSC 467b: Cryptography and Computer Security

CPSC 467b: Cryptography and Computer Security CPSC 467b: Cryptography and Computer Security Instructor: Michael Fischer Lecture by Ewa Syta Lecture 5 January 23, 2012 CPSC 467b, Lecture 5 1/35 Advanced Encryption Standard AES Alternatives CPSC 467b,

More information

The Rectangle Attack

The Rectangle Attack The Rectangle Attack and Other Techniques for Cryptanalysis of Block Ciphers Orr Dunkelman Computer Science Dept. Technion joint work with Eli Biham and Nathan Keller Topics Block Ciphers Cryptanalysis

More information

Key Recovery Attacks of Practical Complexity on AES-256 Variants With Up To 10 Rounds

Key Recovery Attacks of Practical Complexity on AES-256 Variants With Up To 10 Rounds Key Recovery Attacks of Practical Complexity on AES-256 Variants With Up To 10 Rounds Alex Biryukov 1, Orr Dunkelman 2,4, Nathan Keller 3,4, Dmitry Khovratovich 1, and Adi Shamir 4 1 University of Luxembourg,

More information

Cryptography and Network Security

Cryptography and Network Security Cryptography and Network Security Spring 2012 http://users.abo.fi/ipetre/crypto/ Lecture 14: Folklore, Course summary, Exam requirements Ion Petre Department of IT, Åbo Akademi University 1 Folklore on

More information

Attacks on Advanced Encryption Standard: Results and Perspectives

Attacks on Advanced Encryption Standard: Results and Perspectives Attacks on Advanced Encryption Standard: Results and Perspectives Dmitry Microsoft Research 29 February 2012 Design Cryptanalysis history Advanced Encryption Standard Design Cryptanalysis history AES 2

More information

Some thoughts on Collision Attacks in the Hash Functions MD5, SHA-0 and SHA-1

Some thoughts on Collision Attacks in the Hash Functions MD5, SHA-0 and SHA-1 Some thoughts on Collision Attacks in the Hash Functions MD5, SHA-0 and SHA-1 Praveen Gauravaram,William Millan and Juanma Gonzalez Neito Information Security Institute (ISI), QUT, Australia. {p.gauravaram,b.millan,j.gonzaleznieto}@isi.qut.edu.au

More information

Cryptanalysis of the Speck Family of Block Ciphers

Cryptanalysis of the Speck Family of Block Ciphers Cryptanalysis of the Speck Family of Block Ciphers Farzaneh Abed, Eik List, Stefan Lucks, and Jakob Wenzel Bauhaus-Universität Weimar, Germany {farzaneh.abed, eik.list, stefan.lucks, jakob.wenzel}@uni-weimar.de

More information

Cipher Suite Configuration Mode Commands

Cipher Suite Configuration Mode Commands The Cipher Suite Configuration Mode is used to configure the building blocks for SSL cipher suites, including the encryption algorithm, hash function, and key exchange. Important The commands or keywords/variables

More information

Comp527 status items. Crypto Protocols, part 2 Crypto primitives. Bart Preneel July Install the smart card software. Today

Comp527 status items. Crypto Protocols, part 2 Crypto primitives. Bart Preneel July Install the smart card software. Today Comp527 status items Crypto Protocols, part 2 Crypto primitives Today s talk includes slides from: Bart Preneel, Jonathan Millen, and Dan Wallach Install the smart card software Bring CDs back to Dan s

More information

Design of block ciphers

Design of block ciphers Design of block ciphers Joan Daemen STMicroelectronics and Radboud University University of Zagreb Zagreb, Croatia, March 23, 2016 1 / 49 Outline 1 Data Encryption Standard 2 Wide Trail Strategy 3 Rijndael

More information

Cryptanalysis of the GOST Hash Function

Cryptanalysis of the GOST Hash Function Cryptanalysis of the GOST Hash Function Florian Mendel, Norbert Pramstaller, and Christian Rechberger Institute for Applied Information Processing and Communications (IAIK) - Krypto Group Faculty of Computer

More information

Almost Universal Forgery Attacks on AES-Based MAC s

Almost Universal Forgery Attacks on AES-Based MAC s Noname manuscript No. (will be inserted by the editor) Almost Universal Forgery Attacks on AES-Based MAC s Orr Dunkelman Nathan Keller Adi Shamir the date of receipt and acceptance should be inserted later

More information

MILP-aided Cube-attack-like Cryptanalysis on Keccak Keyed Modes

MILP-aided Cube-attack-like Cryptanalysis on Keccak Keyed Modes MILP-aided Cube-attack-like Cryptanalysis on Keccak Keyed Modes Wenquan Bi 1, Xiaoyang Dong 2, Zheng Li 1, Rui Zong 1, and Xiaoyun Wang 1,2 1 Key Laboratory of Cryptologic Technology and Information Security,

More information

Cryptography for Resource Constrained Devices: A Survey

Cryptography for Resource Constrained Devices: A Survey Cryptography for Resource Constrained Devices: A Survey Jacob John Dept. of Computer Engineering Sinhgad Institute of Technology Pune, India. jj31270@yahoo.co.in Abstract Specifically designed and developed

More information

CPSC 467b: Cryptography and Computer Security

CPSC 467b: Cryptography and Computer Security CPSC 467b: Cryptography and Computer Security Instructor: Michael Fischer Lecture by Ewa Syta Lecture 5a January 29, 2013 CPSC 467b, Lecture 5a 1/37 Advanced Encryption Standard AES Alternatives CPSC 467b,

More information

Lecture 1 Applied Cryptography (Part 1)

Lecture 1 Applied Cryptography (Part 1) Lecture 1 Applied Cryptography (Part 1) Patrick P. C. Lee Tsinghua Summer Course 2010 1-1 Roadmap Introduction to Security Introduction to Cryptography Symmetric key cryptography Hash and message authentication

More information

Chaskey: a MAC Algorithm for Microcontrollers Status Update and Proposal of Chaskey-12

Chaskey: a MAC Algorithm for Microcontrollers Status Update and Proposal of Chaskey-12 Chaskey: a MAC Algorithm for Microcontrollers Status Update and Proposal of Chaskey-12 Nicky Mouha 1,2 1 Dept. Electrical Engineering-ESAT/COSIC, KU Leuven, Leuven and iminds, Ghent, Belgium. 2 Project-team

More information

Improved Impossible Differential Attacks against Round-Reduced LBlock

Improved Impossible Differential Attacks against Round-Reduced LBlock Improved Impossible Differential Attacks against Round-Reduced LBlock Christina Boura, Marine Minier, María Naya-Plasencia, Valentin Suder To cite this version: Christina Boura, Marine Minier, María Naya-Plasencia,

More information

On the (In)Security of IDEA in Various Hashing Modes

On the (In)Security of IDEA in Various Hashing Modes On the (In)Security of IDEA in Various Hashing Modes Lei Wei 1, Thomas Peyrin 1, Przemys law Soko lowski 2, San Ling 1, Josef Pieprzyk 2, and Huaxiong Wang 1 1 Division of Mathematical Sciences, School

More information

CSC 580 Cryptography and Computer Security

CSC 580 Cryptography and Computer Security CSC 580 Cryptography and Computer Security Cryptographic Hash Functions (Chapter 11) March 22 and 27, 2018 Overview Today: Quiz (based on HW 6) Graded HW 2 due Grad/honors students: Project topic selection

More information

Introduction to Cryptography. Lecture 6

Introduction to Cryptography. Lecture 6 Introduction to Cryptography Lecture 6 Benny Pinkas page 1 1 Data Integrity, Message Authentication Risk: an active adversary might change messages exchanged between Alice and Bob M Alice M M M Bob Eve

More information

BLAKE2: simpler, smaller, fast as MD5

BLAKE2: simpler, smaller, fast as MD5 BLAKE2: simpler, smaller, fast as MD5 2012.12.23 https://blake2.net Jean-Philippe Aumasson (@aumasson) Samuel Neves (@sevenps) Zooko Wilcox-O Hearn (@zooko) Christian Winnerlein (@codesinchaos) Abstract.

More information

Lightweight Cryptography on ARM

Lightweight Cryptography on ARM Lightweight Cryptography on ARM Software implementation of block ciphers and ECC Rafael Cruz, Tiago Reis, Diego F. Aranha, Julio López, Harsh Kupwade Patil University of Campinas, LG Electronics Inc. Introduction

More information

Advanced Differential Cryptanalysis and GOST Cipher

Advanced Differential Cryptanalysis and GOST Cipher Advanced Differential Cryptanalysis and GOST Cipher Nicolas T. Courtois Theodosis Mourouzis University College London, UK Abstract Differential Cryptanalysis (DC) is one of the oldest known attacks on

More information

BCA III Network security and Cryptography Examination-2016 Model Paper 1

BCA III Network security and Cryptography Examination-2016 Model Paper 1 Time: 3hrs BCA III Network security and Cryptography Examination-2016 Model Paper 1 M.M:50 The question paper contains 40 multiple choice questions with four choices and student will have to pick the correct

More information