CryptoDB
Hadi Soleimany
Affiliation: Shahid Beheshti University, Iran
Publications
Year
Venue
Title
2018
TOSC
Cryptanalysis of Low-Data Instances of Full LowMCv2
📺
Abstract
LowMC is a family of block ciphers designed for a low multiplicative complexity. The specification allows a large variety of instantiations, differing in block size, key size, number of S-boxes applied per round and allowed data complexity. The number of rounds deemed secure is determined by evaluating a number of attack vectors and taking the number of rounds still secure against the best of these. In this paper, we demonstrate that the attacks considered by the designers of LowMC in the version 2 of the round-formular were not sufficient to fend off all possible attacks. In the case of instantiations of LowMC with one of the most useful settings, namely with few applied S-boxes per round and only low allowable data complexities, efficient attacks based on difference enumeration techniques can be constructed. We show that it is most effective to consider tuples of differences instead of simple differences, both to increase the range of the distinguishers and to enable key recovery attacks. All applications for LowMC we are aware of, including signature schemes like Picnic and more recent (ring/group) signature schemes have used version 3 of the roundformular for LowMC, which takes our attack already into account.
Program Committees
- FSE 2020
- FSE 2019
- FSE 2018
Coauthors
- Zhang (1)
- Céline Blondeau (2)
- Christina Boura (1)
- Avik Chakraborti (1)
- Gaëtan Leurent (1)
- Kaisa Nyberg (2)
- Goutam Paul (1)
- Christian Rechberger (1)
- Dhiman Saha (1)
- Valentin Suder (1)
- Tyge Tiessen (1)
- Yanfeng Wang (2)
- Wenling Wu (2)
- Xiaoli Yu (2)
- Lei Zhang (1)
- Huiling Zhang (2)