New forgery attack on the authenticated cipher SCREAM and iSCREAM

Yu-dan TIAN; Yong-zhuang WEI

doi:10.11959/j.issn.2096-109x.2016.00012

您当前的位置：

首页 >

文章列表页 >

New forgery attack on the authenticated cipher SCREAM and iSCREAM

Papers | 更新时间：2024-06-03

- New forgery attack on the authenticated cipher SCREAM and iSCREAM
- Chinese Journal of Network and Information Security Vol. 2, Issue 1, Pages: 60-65(2016)
- 作者机构：
  
  1. 桂林电子科技大学广西信息科学实验中心，广西桂林 541004
  2. 桂林电子科技大学认知无线电与信息处理省部共建教育部重点实验，广西桂林 541004
  3. 中国科学院信息工程研究所信息安全国家重点实验室，北京 100039
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2016.00012
  CLC： TP309.7
- Online First：2016-01，
  
  Published：15 January 2016
- 稿件说明：
移动端阅览
Yu-dan TIAN, Yong-zhuang WEI. New forgery attack on the authenticated cipher SCREAM and iSCREAM[J]. Chinese Journal of Network and Information Security, 2016, 2(1): 60-65.
DOI：

Yu-dan TIAN, Yong-zhuang WEI. New forgery attack on the authenticated cipher SCREAM and iSCREAM[J]. Chinese Journal of Network and Information Security, 2016, 2(1): 60-65. DOI： 10.11959/j.issn.2096-109x.2016.00012.

摘要

摘要：认证加密算法能同时提供信息的加解密及完整性检验两个功能，它已被广泛应用于各种网络安全系统中。最近伴随着欧洲CAESAR密码算法的征集活动，认证加密算法倍受业界关注。SCREAM算法凭借其新颖的设计理念和算法结构，已经顺利入围 CAESAR 竞选中的第二轮候选算法。而该算法是否存在新的安全性问题是目前的研究热点之一。基于 SCREAM 参数的变化特点，利用累加值碰撞的思想提出了一种新的伪造攻击。研究结果表明，新攻击成功的概率为 1，所需的时间复杂度及数据复杂度均可忽略；此外该攻击同样适用于SCREAM的一种变体算法，即iSCREAM。与已有的攻击相比较，新攻击所需的复杂度更低，攻击范围更灵活有效。

Abstract

Authentication encryption algorithms have been widely used in networks security system since these al-gorithms can efficiently provide both privacy and integrity measurement for data transmission. Recently

authentica-tion encryption algorithms have received attentions extensively since the event of CAESAR cipher solicitation was developed. SCREAM had been selected as one of the second-round candidates in CAESAR competition because of its novel structure and design idea. Currently

the security issue of SCREAM becomes an interesting research topic. Based on the characteristic of SCREAM variable parameters

a new forgery attack was proposed by using the basic idea of the sum collision. In particular

this attack could also be used to iSCREAM algorithm. Different to the best known attacks

the new attack requires less time and data complexities. It is shown that this new attack is more flexible and effective. Furthermore

the success probability of the forgery will be one.

关键词

Keywords

references

CAESAR-competition for authenticated encryption: security, ap-plicability and robustness [EB/OL ] . http://competitions.cr.yp.to/caesar.html http://competitions.cr.yp.to/caesar.html .

NASOUR B , JAVAD A , MOHAMMAD R . A single query forgery on avalanchev1 [J ] . Cryptographic Competitions Mailing List , 2014 .

GUY B . Forgery on stateless cmcc [EB/OL ] . http://eprint.iacr.org/eprint-bin/search.pl http://eprint.iacr.org/eprint-bin/search.pl .

CHRISTOPH D , MARIA E , FLORIAN M , et al . Forgery and key recovery attacks on calico [EB/OL ] . http://ascon.iaik.tugraz.at/files/analysis_calico.pdf http://ascon.iaik.tugraz.at/files/analysis_calico.pdf .

THOMAS F , GAËTAN L , VALENTIN S . Forgery and key- recov-ery attacks on CAESAR candidate marble [EB/OL ] . https://www.researchgate.net/publication/278829118_Forgery_and_key-Recovery_Attacks_on_CAESAR_Candidate_Marble https://www.researchgate.net/publication/278829118_Forgery_and_key-Recovery_Attacks_on_CAESAR_Candidate_Marble .

CHRISTOPH V , LEURENT G , STANDAERT F , et al . SCREAM ＆iSCREAM side-channel resistant authenticated encryption with masking [EB/OL ] . http://competitions.cr.yp.to/roundl/screamvl.pdf http://competitions.cr.yp.to/roundl/screamvl.pdf .

GROSSO V , LEURENT G , STANDAERT F , et al . LS-designs:bitslice encryption for efficient masked software implementa-tions [C ] // Fast Software Encryption. Berlin: Springer ,c 2014 : 18 - 37 .

SIANG M , LEI W . Practical forgery attacks on scream and is-cream [EB/OL ] . http://www1.spms.ntu.edu.sg/～syllab/m/images/b/b3/Forgery AttackonSCREAM.pdf http://www1.spms.ntu.edu.sg/～syllab/m/images/b/b3/Forgery AttackonSCREAM.pdf .

GREGOR L , BRICE M , SONDRE R . A generic approach to invariant subspace attacks: cryptanalysis of robin, iscream and zorro [EB/OL ] . http://link.springer.com/chapter/10.1007%2F978-3-662-46800-511 http://link.springer.com/chapter/10.1007%2F978-3-662-46800-511 .

ABED F , FORLER C , LUCKS S . General Overview of the First-Round CAESAR Candidates for Authenticated Ecryption [R ] . 2014 .

LISKOV M , RIVEST R L , WAGNER D . Wagner. Tweakable block ciphers [J ] . Journal of Cryptology , 2011 , 24 ( 3 ): 588 - 613 .

BRINCAT K , MITCHELL C J . New CBC-MAC forgery at-tacks [C ] // Lecture Notes in Computer Science . c 2010 : 3 - 14 .

陈杰 , 胡予濮 , 韦永壮 . 随机消息伪造攻击 PMAC 和TMAC-V [J ] . 计算机学报 , 2007 , 30 ( 10 ): 1827 - 1832 .

CHEN J , HU Y P , WEI Y Z . Random message forgery attack PMAC and TMAC-V [J ] . Chinese Journal of Computers , 2007 , 30 ( 10 ): 1827 - 1832 .

晁仕德 , 张绍兰 , 田华 , 等 . 改进的PMAC及安全性分析 [J ] . 计算机工程与应用 , 2009 , 45 ( 21 ): 77 - 78 .

CHAO S D , ZHANG S L , TIAN H , et al . Modified PMAC and se-curity analysis [J ] . Computer Engineering and Applications , 2009 , 45 ( 21 ): 77 - 78 .

Views

1944

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

New cryptanalysis of the authenticated cipher model JAMBU

Anonymous group key distribution scheme for the internet of vehicles

Fusion of satellite-ground and inter-satellite AKA protocols for double-layer satellite networks

Lightweight mobile Ad Hoc network authentication scheme based on blockchain

Privacy-preserving access control for public wireless LAN utilizing the bitcoin blockchain

Related Author

Yu-dan TIAN

Yong-zhuang WEI

Huaqun WANG

Zhiwang HE

Hui LI

Ruhui MA

Xiaoping SHI

Jin CAO

Related Institution

Information Technology Services Center,East China Normal University

Key Laboratory of Cognitive Radio and Information Processing Ministry of Education,(Guilin University of Electronic Technology)

School of Cyberspace Security, Beijing University of Posts and Telecommunications

National Engineering Lab for Mobile Network Security

School of Network Education,Beijing University of Posts and Telecommunications

⁰