An experimentally verified attack on full Grain-128 using dedicated reconfigurable hardware

Itai Dinur; Tim Güneysu; Christof Paar; Adi Shamir; Ralf Zimmermann

doi:10.1007/978-3-642-25385-0_18

An experimentally verified attack on full Grain-128 using dedicated reconfigurable hardware

Itai Dinur, Tim Güneysu, Christof Paar, Adi Shamir, Ralf Zimmermann

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

Abstract

In this paper we describe the first single-key attack which can recover the full key of the full version of Grain-128 for arbitrary keys by an algorithm which is significantly faster than exhaustive search (by a factor of about 2³⁸). It is based on a new version of a cube tester, which uses an improved choice of dynamic variables to eliminate the previously made assumption that ten particular key bits are zero. In addition, the new attack is much faster than the previous weak-key attack, and has a simpler key recovery process. Since it is extremely difficult to mathematically analyze the expected behavior of such attacks, we implemented it on RIVYERA, which is a new massively parallel reconfigurable hardware, and tested its main components for dozens of random keys. These tests experimentally verified the correctness and expected complexity of the attack, by finding a very significant bias in our new cube tester for about 7.5% of the keys we tested. This is the first time that the main components of a complex analytical attack are successfully realized against a full-size cipher with a special-purpose machine. Moreover, it is also the first attack that truly exploits the configurable nature of an FPGA-based cryptanalytical hardware.

Original language	American English
Title of host publication	Advances in Cryptology, ASIACRYPT 2011 - 17th International Conference on the Theory and Application of Cryptology and Information Security, Proceedings
Pages	327-343
Number of pages	17
DOIs	https://doi.org/10.1007/978-3-642-25385-0_18
State	Published - 12 Dec 2011
Externally published	Yes
Event	17th International Conference on the Theory and Application of Cryptology and Information Security, ASIACRYPT 2011 - Seoul, Korea, Republic of Duration: 4 Dec 2011 → 8 Dec 2011

Publication series

Name	Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume	7073 LNCS

Conference

Conference	17th International Conference on the Theory and Application of Cryptology and Information Security, ASIACRYPT 2011
Country/Territory	Korea, Republic of
City	Seoul
Period	4/12/11 → 8/12/11

Keywords

Grain-128
RIVYERA
cryptanalysis
cube attacks
cube testers
experimental verification
stream cipher

All Science Journal Classification (ASJC) codes

Theoretical Computer Science
General Computer Science

Access to Document

10.1007/978-3-642-25385-0_18

Cite this

Dinur, I., Güneysu, T., Paar, C., Shamir, A., & Zimmermann, R. (2011). An experimentally verified attack on full Grain-128 using dedicated reconfigurable hardware. In Advances in Cryptology, ASIACRYPT 2011 - 17th International Conference on the Theory and Application of Cryptology and Information Security, Proceedings (pp. 327-343). (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 7073 LNCS). https://doi.org/10.1007/978-3-642-25385-0_18

Dinur, Itai ; Güneysu, Tim ; Paar, Christof et al. / An experimentally verified attack on full Grain-128 using dedicated reconfigurable hardware. Advances in Cryptology, ASIACRYPT 2011 - 17th International Conference on the Theory and Application of Cryptology and Information Security, Proceedings. 2011. pp. 327-343 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)).

@inproceedings{039acf7624a74ce8a9589c7f24ed976f,

title = "An experimentally verified attack on full Grain-128 using dedicated reconfigurable hardware",

abstract = "In this paper we describe the first single-key attack which can recover the full key of the full version of Grain-128 for arbitrary keys by an algorithm which is significantly faster than exhaustive search (by a factor of about 238). It is based on a new version of a cube tester, which uses an improved choice of dynamic variables to eliminate the previously made assumption that ten particular key bits are zero. In addition, the new attack is much faster than the previous weak-key attack, and has a simpler key recovery process. Since it is extremely difficult to mathematically analyze the expected behavior of such attacks, we implemented it on RIVYERA, which is a new massively parallel reconfigurable hardware, and tested its main components for dozens of random keys. These tests experimentally verified the correctness and expected complexity of the attack, by finding a very significant bias in our new cube tester for about 7.5% of the keys we tested. This is the first time that the main components of a complex analytical attack are successfully realized against a full-size cipher with a special-purpose machine. Moreover, it is also the first attack that truly exploits the configurable nature of an FPGA-based cryptanalytical hardware.",

keywords = "Grain-128, RIVYERA, cryptanalysis, cube attacks, cube testers, experimental verification, stream cipher",

author = "Itai Dinur and Tim G{\"u}neysu and Christof Paar and Adi Shamir and Ralf Zimmermann",

year = "2011",

month = dec,

day = "12",

doi = "10.1007/978-3-642-25385-0_18",

language = "American English",

isbn = "9783642253843",

series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",

pages = "327--343",

booktitle = "Advances in Cryptology, ASIACRYPT 2011 - 17th International Conference on the Theory and Application of Cryptology and Information Security, Proceedings",

note = "17th International Conference on the Theory and Application of Cryptology and Information Security, ASIACRYPT 2011 ; Conference date: 04-12-2011 Through 08-12-2011",

}

Dinur, I, Güneysu, T, Paar, C, Shamir, A & Zimmermann, R 2011, An experimentally verified attack on full Grain-128 using dedicated reconfigurable hardware. in Advances in Cryptology, ASIACRYPT 2011 - 17th International Conference on the Theory and Application of Cryptology and Information Security, Proceedings. Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), vol. 7073 LNCS, pp. 327-343, 17th International Conference on the Theory and Application of Cryptology and Information Security, ASIACRYPT 2011, Seoul, Korea, Republic of, 4/12/11. https://doi.org/10.1007/978-3-642-25385-0_18

An experimentally verified attack on full Grain-128 using dedicated reconfigurable hardware. / Dinur, Itai; Güneysu, Tim; Paar, Christof et al.
Advances in Cryptology, ASIACRYPT 2011 - 17th International Conference on the Theory and Application of Cryptology and Information Security, Proceedings. 2011. p. 327-343 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 7073 LNCS).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - An experimentally verified attack on full Grain-128 using dedicated reconfigurable hardware

AU - Dinur, Itai

AU - Güneysu, Tim

AU - Paar, Christof

AU - Shamir, Adi

AU - Zimmermann, Ralf

PY - 2011/12/12

Y1 - 2011/12/12

N2 - In this paper we describe the first single-key attack which can recover the full key of the full version of Grain-128 for arbitrary keys by an algorithm which is significantly faster than exhaustive search (by a factor of about 238). It is based on a new version of a cube tester, which uses an improved choice of dynamic variables to eliminate the previously made assumption that ten particular key bits are zero. In addition, the new attack is much faster than the previous weak-key attack, and has a simpler key recovery process. Since it is extremely difficult to mathematically analyze the expected behavior of such attacks, we implemented it on RIVYERA, which is a new massively parallel reconfigurable hardware, and tested its main components for dozens of random keys. These tests experimentally verified the correctness and expected complexity of the attack, by finding a very significant bias in our new cube tester for about 7.5% of the keys we tested. This is the first time that the main components of a complex analytical attack are successfully realized against a full-size cipher with a special-purpose machine. Moreover, it is also the first attack that truly exploits the configurable nature of an FPGA-based cryptanalytical hardware.

AB - In this paper we describe the first single-key attack which can recover the full key of the full version of Grain-128 for arbitrary keys by an algorithm which is significantly faster than exhaustive search (by a factor of about 238). It is based on a new version of a cube tester, which uses an improved choice of dynamic variables to eliminate the previously made assumption that ten particular key bits are zero. In addition, the new attack is much faster than the previous weak-key attack, and has a simpler key recovery process. Since it is extremely difficult to mathematically analyze the expected behavior of such attacks, we implemented it on RIVYERA, which is a new massively parallel reconfigurable hardware, and tested its main components for dozens of random keys. These tests experimentally verified the correctness and expected complexity of the attack, by finding a very significant bias in our new cube tester for about 7.5% of the keys we tested. This is the first time that the main components of a complex analytical attack are successfully realized against a full-size cipher with a special-purpose machine. Moreover, it is also the first attack that truly exploits the configurable nature of an FPGA-based cryptanalytical hardware.

KW - Grain-128

KW - RIVYERA

KW - cryptanalysis

KW - cube attacks

KW - cube testers

KW - experimental verification

KW - stream cipher

UR - http://www.scopus.com/inward/record.url?scp=82955184617&partnerID=8YFLogxK

U2 - 10.1007/978-3-642-25385-0_18

DO - 10.1007/978-3-642-25385-0_18

M3 - Conference contribution

SN - 9783642253843

T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

SP - 327

EP - 343

BT - Advances in Cryptology, ASIACRYPT 2011 - 17th International Conference on the Theory and Application of Cryptology and Information Security, Proceedings

T2 - 17th International Conference on the Theory and Application of Cryptology and Information Security, ASIACRYPT 2011

Y2 - 4 December 2011 through 8 December 2011

ER -

Dinur I, Güneysu T, Paar C, Shamir A, Zimmermann R. An experimentally verified attack on full Grain-128 using dedicated reconfigurable hardware. In Advances in Cryptology, ASIACRYPT 2011 - 17th International Conference on the Theory and Application of Cryptology and Information Security, Proceedings. 2011. p. 327-343. (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)). doi: 10.1007/978-3-642-25385-0_18

An experimentally verified attack on full Grain-128 using dedicated reconfigurable hardware

Abstract

Publication series

Conference

Keywords

All Science Journal Classification (ASJC) codes

Access to Document

Other files and links

Fingerprint

Cite this