Out of oddity – new cryptanalytic techniques against symmetric primitives optimized for integrity proof systems

Tim Beyne; Anne Canteaut; Itai Dinur; Maria Eichlseder; Gregor Leander; Gaëtan Leurent; María Naya-Plasencia; Léo Perrin; Yu Sasaki; Yosuke Todo; Friedrich Wiemer

doi:10.1007/978-3-030-56877-1_11

Out of oddity – new cryptanalytic techniques against symmetric primitives optimized for integrity proof systems

Tim Beyne, Anne Canteaut, Itai Dinur, Maria Eichlseder, Gregor Leander, Gaëtan Leurent, María Naya-Plasencia, Léo Perrin, Yu Sasaki, Yosuke Todo, Friedrich Wiemer

Department of Computer Science

Ben-Gurion University of the Negev

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

Abstract

The security and performance of many integrity proof systems like SNARKs, STARKs and Bulletproofs highly depend on the underlying hash function. For this reason several new proposals have recently been developed. These primitives obviously require an in-depth security evaluation, especially since their implementation constraints have led to less standard design approaches. This work compares the security levels offered by two recent families of such primitives, namely GMiMC and HadesMiMC. We exhibit low-complexity distinguishers against the GMiMC and HadesMiMC permutations for most parameters proposed in recently launched public challenges for STARK-friendly hash functions. In the more concrete setting of the sponge construction corresponding to the practical use in the ZK-STARK protocol, we present a practical collision attack on a round-reduced version of GMiMC and a preimage attack on some instances of HadesMiMC. To achieve those results, we adapt and generalize several cryptographic techniques to fields of odd characteristic.

Original language	American English
Title of host publication	Advances in Cryptology - CRYPTO 2020 - 40th Annual International Cryptology Conference, Proceedings
Editors	Daniele Micciancio, Thomas Ristenpart
Publisher	Springer
Pages	299-328
Number of pages	30
ISBN (Print)	9783030568764
DOIs	https://doi.org/10.1007/978-3-030-56877-1_11
State	Published - 1 Jan 2020
Event	40th Annual International Cryptology Conference, CRYPTO 2020 - Santa Barbara, United States Duration: 17 Aug 2020 → 21 Aug 2020

Publication series

Name	Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume	12172 LNCS

Conference

Conference	40th Annual International Cryptology Conference, CRYPTO 2020
Country/Territory	United States
City	Santa Barbara
Period	17/08/20 → 21/08/20

Keywords

GMiMC
HadesMiMC
Hash functions
Integral attacks
Integrity proof systems

All Science Journal Classification (ASJC) codes

Theoretical Computer Science
General Computer Science

Access to Document

10.1007/978-3-030-56877-1_11

Cite this

Beyne, T., Canteaut, A., Dinur, I., Eichlseder, M., Leander, G., Leurent, G., Naya-Plasencia, M., Perrin, L., Sasaki, Y., Todo, Y., & Wiemer, F. (2020). Out of oddity – new cryptanalytic techniques against symmetric primitives optimized for integrity proof systems. In D. Micciancio, & T. Ristenpart (Eds.), Advances in Cryptology - CRYPTO 2020 - 40th Annual International Cryptology Conference, Proceedings (pp. 299-328). (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 12172 LNCS). Springer. https://doi.org/10.1007/978-3-030-56877-1_11

Beyne, Tim ; Canteaut, Anne ; Dinur, Itai et al. / Out of oddity – new cryptanalytic techniques against symmetric primitives optimized for integrity proof systems. Advances in Cryptology - CRYPTO 2020 - 40th Annual International Cryptology Conference, Proceedings. editor / Daniele Micciancio ; Thomas Ristenpart. Springer, 2020. pp. 299-328 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)).

@inproceedings{5c01ec62a8d847f3b722267717bb7baa,

title = "Out of oddity – new cryptanalytic techniques against symmetric primitives optimized for integrity proof systems",

abstract = "The security and performance of many integrity proof systems like SNARKs, STARKs and Bulletproofs highly depend on the underlying hash function. For this reason several new proposals have recently been developed. These primitives obviously require an in-depth security evaluation, especially since their implementation constraints have led to less standard design approaches. This work compares the security levels offered by two recent families of such primitives, namely GMiMC and HadesMiMC. We exhibit low-complexity distinguishers against the GMiMC and HadesMiMC permutations for most parameters proposed in recently launched public challenges for STARK-friendly hash functions. In the more concrete setting of the sponge construction corresponding to the practical use in the ZK-STARK protocol, we present a practical collision attack on a round-reduced version of GMiMC and a preimage attack on some instances of HadesMiMC. To achieve those results, we adapt and generalize several cryptographic techniques to fields of odd characteristic.",

keywords = "GMiMC, HadesMiMC, Hash functions, Integral attacks, Integrity proof systems",

author = "Tim Beyne and Anne Canteaut and Itai Dinur and Maria Eichlseder and Gregor Leander and Ga{\"e}tan Leurent and Mar{\'i}a Naya-Plasencia and L{\'e}o Perrin and Yu Sasaki and Yosuke Todo and Friedrich Wiemer",

note = "Publisher Copyright: {\textcopyright} International Association for Cryptologic Research 2020.; 40th Annual International Cryptology Conference, CRYPTO 2020 ; Conference date: 17-08-2020 Through 21-08-2020",

year = "2020",

month = jan,

day = "1",

doi = "10.1007/978-3-030-56877-1_11",

language = "American English",

isbn = "9783030568764",

series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",

publisher = "Springer",

pages = "299--328",

editor = "Daniele Micciancio and Thomas Ristenpart",

booktitle = "Advances in Cryptology - CRYPTO 2020 - 40th Annual International Cryptology Conference, Proceedings",

address = "Germany",

}

Beyne, T, Canteaut, A, Dinur, I, Eichlseder, M, Leander, G, Leurent, G, Naya-Plasencia, M, Perrin, L, Sasaki, Y, Todo, Y & Wiemer, F 2020, Out of oddity – new cryptanalytic techniques against symmetric primitives optimized for integrity proof systems. in D Micciancio & T Ristenpart (eds), Advances in Cryptology - CRYPTO 2020 - 40th Annual International Cryptology Conference, Proceedings. Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), vol. 12172 LNCS, Springer, pp. 299-328, 40th Annual International Cryptology Conference, CRYPTO 2020, Santa Barbara, United States, 17/08/20. https://doi.org/10.1007/978-3-030-56877-1_11

Out of oddity – new cryptanalytic techniques against symmetric primitives optimized for integrity proof systems. / Beyne, Tim; Canteaut, Anne; Dinur, Itai et al.
Advances in Cryptology - CRYPTO 2020 - 40th Annual International Cryptology Conference, Proceedings. ed. / Daniele Micciancio; Thomas Ristenpart. Springer, 2020. p. 299-328 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 12172 LNCS).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - Out of oddity – new cryptanalytic techniques against symmetric primitives optimized for integrity proof systems

AU - Beyne, Tim

AU - Canteaut, Anne

AU - Dinur, Itai

AU - Eichlseder, Maria

AU - Leander, Gregor

AU - Leurent, Gaëtan

AU - Naya-Plasencia, María

AU - Perrin, Léo

AU - Sasaki, Yu

AU - Todo, Yosuke

AU - Wiemer, Friedrich

PY - 2020/1/1

Y1 - 2020/1/1

N2 - The security and performance of many integrity proof systems like SNARKs, STARKs and Bulletproofs highly depend on the underlying hash function. For this reason several new proposals have recently been developed. These primitives obviously require an in-depth security evaluation, especially since their implementation constraints have led to less standard design approaches. This work compares the security levels offered by two recent families of such primitives, namely GMiMC and HadesMiMC. We exhibit low-complexity distinguishers against the GMiMC and HadesMiMC permutations for most parameters proposed in recently launched public challenges for STARK-friendly hash functions. In the more concrete setting of the sponge construction corresponding to the practical use in the ZK-STARK protocol, we present a practical collision attack on a round-reduced version of GMiMC and a preimage attack on some instances of HadesMiMC. To achieve those results, we adapt and generalize several cryptographic techniques to fields of odd characteristic.

AB - The security and performance of many integrity proof systems like SNARKs, STARKs and Bulletproofs highly depend on the underlying hash function. For this reason several new proposals have recently been developed. These primitives obviously require an in-depth security evaluation, especially since their implementation constraints have led to less standard design approaches. This work compares the security levels offered by two recent families of such primitives, namely GMiMC and HadesMiMC. We exhibit low-complexity distinguishers against the GMiMC and HadesMiMC permutations for most parameters proposed in recently launched public challenges for STARK-friendly hash functions. In the more concrete setting of the sponge construction corresponding to the practical use in the ZK-STARK protocol, we present a practical collision attack on a round-reduced version of GMiMC and a preimage attack on some instances of HadesMiMC. To achieve those results, we adapt and generalize several cryptographic techniques to fields of odd characteristic.

KW - GMiMC

KW - HadesMiMC

KW - Hash functions

KW - Integral attacks

KW - Integrity proof systems

UR - http://www.scopus.com/inward/record.url?scp=85089723936&partnerID=8YFLogxK

U2 - 10.1007/978-3-030-56877-1_11

DO - 10.1007/978-3-030-56877-1_11

M3 - Conference contribution

SN - 9783030568764

T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

SP - 299

EP - 328

BT - Advances in Cryptology - CRYPTO 2020 - 40th Annual International Cryptology Conference, Proceedings

A2 - Micciancio, Daniele

A2 - Ristenpart, Thomas

PB - Springer

T2 - 40th Annual International Cryptology Conference, CRYPTO 2020

Y2 - 17 August 2020 through 21 August 2020

ER -

Beyne T, Canteaut A, Dinur I, Eichlseder M, Leander G, Leurent G et al. Out of oddity – new cryptanalytic techniques against symmetric primitives optimized for integrity proof systems. In Micciancio D, Ristenpart T, editors, Advances in Cryptology - CRYPTO 2020 - 40th Annual International Cryptology Conference, Proceedings. Springer. 2020. p. 299-328. (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)). doi: 10.1007/978-3-030-56877-1_11

Out of oddity – new cryptanalytic techniques against symmetric primitives optimized for integrity proof systems

Abstract

Publication series

Conference

Keywords

All Science Journal Classification (ASJC) codes

Access to Document

Other files and links

Fingerprint

Cite this