A Key-Recovery Attack on SOBER-128

Nyberg, Kaisa; Hakala, Risto

doi:10.4230/DagSemProc.07021.4

Document

A Key-Recovery Attack on SOBER-128

Authors Kaisa Nyberg, Risto Hakala

Part of: Volume: Dagstuhl Seminar Proceedings, Volume 7021
Part of: Series: Dagstuhl Seminar Proceedings (DagSemProc)
License: Creative Commons Attribution 4.0 International license
Publication Date: 2007-06-06

PDF

File

PDF

DagSemProc.07021.4.pdf

Filesize: 254 kB
11 pages

Document Identifiers

DOI: 10.4230/DagSemProc.07021.4
URN: urn:nbn:de:0030-drops-10188

Subject Classification

Keywords

Linear approximations
correlation
linear cryptanalysis
key recovery attack
piling-up lemma
SOBER-128

Metrics

Access Statistics
Total Accesses (updated on a weekly basis)

0

PDF Downloads

0

Metadata Views

Abstract

In this talk we consider linear approximations of layered cipher constructions with secret key-dependent constants that are inserted between layers,  and where the layers have strong interdependency. Then clearly, averaging over the constant would clearly be wrong as it will break the interdependencies, and the Piling Up-lemma cannot be used. We show how to use linear approximations to divide the constants into constant classes, not necessary determined by a linear relation. As an example, a nonlinear filter generator SOBER-128 is considered and we show how to extend Matsui's Algorithm I in this case. Also the possibility of using multiple linear approximations simultaneously is considered.

Cite As Get BibTex

Kaisa Nyberg and Risto Hakala. A Key-Recovery Attack on SOBER-128. In Symmetric Cryptography. Dagstuhl Seminar Proceedings, Volume 7021, pp. 1-11, Schloss Dagstuhl – Leibniz-Zentrum für Informatik (2007) https://doi.org/10.4230/DagSemProc.07021.4

Author Details

Kaisa Nyberg

Risto Hakala

Any Issues?

Feedback on the Current Page

Thanks for your feedback!

Feedback submitted to Dagstuhl Publishing

Could not send message

Please try again later or send an E-mail