UNAF: A Special Set of Additive Differences with Application to the Differential Analysis of ARX

Vesselin Velichkov; Nicky Mouha; Christophe De Cannière; Bart Preneel

doi:10.1007/978-3-642-34047-5_17

UNAF: A Special Set of Additive Differences with Application to the Differential Analysis of ARX

Vesselin Velichkov, Nicky Mouha, Christophe De Cannière, Bart Preneel

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

Abstract

Due to their fast performance in software, an increasing number of cryptographic primitives are constructed using the operations addition modulo 2n, bit rotation and XOR (ARX). However, the resistance of ARX-based ciphers against differential cryptanalysis is not well understood. In this paper, we propose a new tool for evaluating more accurately the probabilities of additive differentials over multiple rounds of a cryptographic primitive. First, we introduce a special set of additive differences, called UNAF (unsigned non-adjacent form) differences. Then, we show how to apply them to find good differential trails using an algorithm for the automatic search for differentials. Finally, we describe a key-recovery attack on stream cipher Salsa20 reduced to five rounds, based on UNAF differences.

Original language	English
Title of host publication	Fast Software Encryption
Editors	Anne Canteaut
Place of Publication	Berlin, Heidelberg
Publisher	Springer
Pages	287-305
Number of pages	19
ISBN (Print)	978-3-642-34047-5
DOIs	https://doi.org/10.1007/978-3-642-34047-5_17
Publication status	Published - 2012
Event	19th annual Fast Software Encryption workshop - Washington, United States Duration: 19 Mar 2012 → 21 Mar 2012 http://fse2012.inria.fr/

Conference

Conference	19th annual Fast Software Encryption workshop
Abbreviated title	FSE 2012
Country/Territory	United States
City	Washington
Period	19/03/12 → 21/03/12
Internet address	http://fse2012.inria.fr/

Access to Document

10.1007/978-3-642-34047-5_17

https://link.springer.com/chapter/10.1007%2F978-3-642-34047-5_17

Cite this

@inproceedings{ea85f5720f21491f93be684712d10dd1,

title = "UNAF: A Special Set of Additive Differences with Application to the Differential Analysis of ARX",

abstract = "Due to their fast performance in software, an increasing number of cryptographic primitives are constructed using the operations addition modulo 2n, bit rotation and XOR (ARX). However, the resistance of ARX-based ciphers against differential cryptanalysis is not well understood. In this paper, we propose a new tool for evaluating more accurately the probabilities of additive differentials over multiple rounds of a cryptographic primitive. First, we introduce a special set of additive differences, called UNAF (unsigned non-adjacent form) differences. Then, we show how to apply them to find good differential trails using an algorithm for the automatic search for differentials. Finally, we describe a key-recovery attack on stream cipher Salsa20 reduced to five rounds, based on UNAF differences.",

author = "Vesselin Velichkov and Nicky Mouha and {De Canni{\`e}re}, Christophe and Bart Preneel",

year = "2012",

doi = "10.1007/978-3-642-34047-5_17",

language = "English",

isbn = "978-3-642-34047-5",

pages = "287--305",

editor = "Anne Canteaut",

booktitle = "Fast Software Encryption",

publisher = "Springer",

address = "United Kingdom",

note = "19th annual Fast Software Encryption workshop, FSE 2012 ; Conference date: 19-03-2012 Through 21-03-2012",

url = "http://fse2012.inria.fr/",

}

Velichkov, V, Mouha, N, De Cannière, C & Preneel, B 2012, UNAF: A Special Set of Additive Differences with Application to the Differential Analysis of ARX. in A Canteaut (ed.), Fast Software Encryption. Springer, Berlin, Heidelberg, pp. 287-305, 19th annual Fast Software Encryption workshop, Washington, District of Columbia, United States, 19/03/12. https://doi.org/10.1007/978-3-642-34047-5_17

TY - GEN

T1 - UNAF: A Special Set of Additive Differences with Application to the Differential Analysis of ARX

AU - Velichkov, Vesselin

AU - Mouha, Nicky

AU - De Cannière, Christophe

AU - Preneel, Bart

PY - 2012

Y1 - 2012

N2 - Due to their fast performance in software, an increasing number of cryptographic primitives are constructed using the operations addition modulo 2n, bit rotation and XOR (ARX). However, the resistance of ARX-based ciphers against differential cryptanalysis is not well understood. In this paper, we propose a new tool for evaluating more accurately the probabilities of additive differentials over multiple rounds of a cryptographic primitive. First, we introduce a special set of additive differences, called UNAF (unsigned non-adjacent form) differences. Then, we show how to apply them to find good differential trails using an algorithm for the automatic search for differentials. Finally, we describe a key-recovery attack on stream cipher Salsa20 reduced to five rounds, based on UNAF differences.

AB - Due to their fast performance in software, an increasing number of cryptographic primitives are constructed using the operations addition modulo 2n, bit rotation and XOR (ARX). However, the resistance of ARX-based ciphers against differential cryptanalysis is not well understood. In this paper, we propose a new tool for evaluating more accurately the probabilities of additive differentials over multiple rounds of a cryptographic primitive. First, we introduce a special set of additive differences, called UNAF (unsigned non-adjacent form) differences. Then, we show how to apply them to find good differential trails using an algorithm for the automatic search for differentials. Finally, we describe a key-recovery attack on stream cipher Salsa20 reduced to five rounds, based on UNAF differences.

U2 - 10.1007/978-3-642-34047-5_17

DO - 10.1007/978-3-642-34047-5_17

M3 - Conference contribution

SN - 978-3-642-34047-5

SP - 287

EP - 305

BT - Fast Software Encryption

A2 - Canteaut, Anne

PB - Springer

CY - Berlin, Heidelberg

T2 - 19th annual Fast Software Encryption workshop

Y2 - 19 March 2012 through 21 March 2012

ER -

UNAF: A Special Set of Additive Differences with Application to the Differential Analysis of ARX

Abstract

Conference

Access to Document

Fingerprint

Cite this