Rotational-XOR cryptanalysis of reduced-round SPECK

Yunwen Liu; Glenn  de Witte; Adrián  Ranea; Tomer Ashur

doi:10.13154/tosc.v2017.i3.24-36

Rotational-XOR cryptanalysis of reduced-round SPECK

Yunwen Liu, Glenn de Witte (Corresponding author), Adrián Ranea, Tomer Ashur

Research output: Contribution to journal › Article › Academic › peer-review

56 Downloads (Pure)

Abstract

In this paper we formulate a SAT/SMT model for Rotational-XOR (RX) cryptanalysis in ARX primitives for the first time. The model is successfully applied to the block cipher family Speck, and distinguishers covering more rounds than previously are found, as well as RX-characteristics requiring less data to detect. In particular, we present distinguishers for 10, 11 and 12 rounds for Speck32/64 which have better probabilities than the previously known 9-round differential characteristic, for a certain weak key class. For versions of Speck48, we present several distinguishers, among which the longest one covering 15 rounds, while the previously best differential characteristic only covered 11.

Original language	English
Pages (from-to)	24-36
Number of pages	13
Journal	IACR Transactions on Symmetric Cryptology
Volume	2017
Issue number	3
DOIs	https://doi.org/10.13154/tosc.v2017.i3.24-36
Publication status	Published - 19 Sept 2017
Externally published	Yes

Keywords

Rotational-XOR cryptanalysis
ARX
Weak keys
SAT/SMT

Access to Document

10.13154/tosc.v2017.i3.24-36

Author versionFinal author version , 478 KB
publishers versionFinal published version, 643 KB

Cite this

@article{3a5e6e6dbb27439da0b0b3b1b551aae8,

title = "Rotational-XOR cryptanalysis of reduced-round SPECK",

abstract = "In this paper we formulate a SAT/SMT model for Rotational-XOR (RX) cryptanalysis in ARX primitives for the first time. The model is successfully applied to the block cipher family Speck, and distinguishers covering more rounds than previously are found, as well as RX-characteristics requiring less data to detect. In particular, we present distinguishers for 10, 11 and 12 rounds for Speck32/64 which have better probabilities than the previously known 9-round differential characteristic, for a certain weak key class. For versions of Speck48, we present several distinguishers, among which the longest one covering 15 rounds, while the previously best differential characteristic only covered 11.",

keywords = "Rotational-XOR cryptanalysis, ARX, Weak keys, SAT/SMT",

author = "Yunwen Liu and {de Witte}, Glenn and Adri{\'a}n Ranea and Tomer Ashur",

year = "2017",

month = sep,

day = "19",

doi = "10.13154/tosc.v2017.i3.24-36",

language = "English",

volume = "2017",

pages = "24--36",

journal = "IACR Transactions on Symmetric Cryptology",

issn = "2519-173X",

publisher = "Ruhruniversit{\"a}t Bochum",

number = "3",

}

TY - JOUR

T1 - Rotational-XOR cryptanalysis of reduced-round SPECK

AU - Liu, Yunwen

AU - de Witte , Glenn

AU - Ranea, Adrián

AU - Ashur, Tomer

PY - 2017/9/19

Y1 - 2017/9/19

N2 - In this paper we formulate a SAT/SMT model for Rotational-XOR (RX) cryptanalysis in ARX primitives for the first time. The model is successfully applied to the block cipher family Speck, and distinguishers covering more rounds than previously are found, as well as RX-characteristics requiring less data to detect. In particular, we present distinguishers for 10, 11 and 12 rounds for Speck32/64 which have better probabilities than the previously known 9-round differential characteristic, for a certain weak key class. For versions of Speck48, we present several distinguishers, among which the longest one covering 15 rounds, while the previously best differential characteristic only covered 11.

AB - In this paper we formulate a SAT/SMT model for Rotational-XOR (RX) cryptanalysis in ARX primitives for the first time. The model is successfully applied to the block cipher family Speck, and distinguishers covering more rounds than previously are found, as well as RX-characteristics requiring less data to detect. In particular, we present distinguishers for 10, 11 and 12 rounds for Speck32/64 which have better probabilities than the previously known 9-round differential characteristic, for a certain weak key class. For versions of Speck48, we present several distinguishers, among which the longest one covering 15 rounds, while the previously best differential characteristic only covered 11.

KW - Rotational-XOR cryptanalysis

KW - ARX

KW - Weak keys

KW - SAT/SMT

U2 - 10.13154/tosc.v2017.i3.24-36

DO - 10.13154/tosc.v2017.i3.24-36

M3 - Article

SN - 2519-173X

VL - 2017

SP - 24

EP - 36

JO - IACR Transactions on Symmetric Cryptology

JF - IACR Transactions on Symmetric Cryptology

IS - 3

ER -

Rotational-XOR cryptanalysis of reduced-round SPECK

Abstract

Keywords

Access to Document

Fingerprint

Cite this