New Yoyo Tricks with AES-based Permutations
In Asiacrypt 2017, Rønjom et al. reported some interesting generic properties of SPNs, leading to what they call the Yoyo trick, and applied it to find the most efficient distinguishers on AES. In this work, we explore the Yoyo idea in distinguishing public permutations for the first time. We intro...
Main Authors: | , , |
---|---|
Format: | Article |
Language: | English |
Published: |
Ruhr-Universität Bochum
2018-12-01
|
Series: | IACR Transactions on Symmetric Cryptology |
Subjects: | |
Online Access: | https://tosc.iacr.org/index.php/ToSC/article/view/7363 |
id |
doaj-4c8e8255cf9944e9810343c7c7808ef1 |
---|---|
record_format |
Article |
spelling |
doaj-4c8e8255cf9944e9810343c7c7808ef12021-03-02T02:02:08ZengRuhr-Universität BochumIACR Transactions on Symmetric Cryptology2519-173X2018-12-012018410.13154/tosc.v2018.i4.201-127New Yoyo Tricks with AES-based PermutationsDhiman Saha0Mostafizar Rahman1Goutam Paul2Department of Electrical Engineering & Computer Science, Indian Institute of Technology, Bhilai 492015Cryptology and Security Research Unit (CSRU), R. C. Bose Centre for Cryptology and Security, Indian Statistical Institute, Kolkata 700108Cryptology and Security Research Unit (CSRU), R. C. Bose Centre for Cryptology and bSecurity, Indian Statistical Institute, Kolkata 700108 In Asiacrypt 2017, Rønjom et al. reported some interesting generic properties of SPNs, leading to what they call the Yoyo trick, and applied it to find the most efficient distinguishers on AES. In this work, we explore the Yoyo idea in distinguishing public permutations for the first time. We introduce the notion of nested zero difference pattern which extends the Yoyo idea and helps to compose it using improbable and impossible differential strategies to penetrate higher number of rounds. We devise a novel inside-out application of Yoyo which enables us to start the Yoyo game from an internal round. As an application, we investigate the AES-based public permutation AESQ used inside the authenticated cipher PAEQ. We achieve the first deterministic distinguisher of AESQ up to 8 rounds and the first 9-round distinguisher of AESQ that start from the first round with a practical complexity of around 226. We manage to augment Yoyo with improbable and impossible differentials leading to distinguishers on 9, 10, 12 rounds with complexities of about 22, 228, 2126 respectively. Further, with impossible differentials and a bi-directional Yoyo strategy, we obtain a 16-round impossible differential distinguisher with a complexity of 2126. Our results outperform all previous records on AESQ by a substantial margin. As another application, we apply the proposed strategies on AES in the known-key setting leading to one of the best 8-round known-key distinguisher with a complexity of 230. Finally, this work amplifies the scope of the Yoyo technique as a generic cryptanalysis tool. https://tosc.iacr.org/index.php/ToSC/article/view/7363AESAESQDistinguisherPAEQYoyoDifferential Cryptanalysis |
collection |
DOAJ |
language |
English |
format |
Article |
sources |
DOAJ |
author |
Dhiman Saha Mostafizar Rahman Goutam Paul |
spellingShingle |
Dhiman Saha Mostafizar Rahman Goutam Paul New Yoyo Tricks with AES-based Permutations IACR Transactions on Symmetric Cryptology AES AESQ Distinguisher PAEQ Yoyo Differential Cryptanalysis |
author_facet |
Dhiman Saha Mostafizar Rahman Goutam Paul |
author_sort |
Dhiman Saha |
title |
New Yoyo Tricks with AES-based Permutations |
title_short |
New Yoyo Tricks with AES-based Permutations |
title_full |
New Yoyo Tricks with AES-based Permutations |
title_fullStr |
New Yoyo Tricks with AES-based Permutations |
title_full_unstemmed |
New Yoyo Tricks with AES-based Permutations |
title_sort |
new yoyo tricks with aes-based permutations |
publisher |
Ruhr-Universität Bochum |
series |
IACR Transactions on Symmetric Cryptology |
issn |
2519-173X |
publishDate |
2018-12-01 |
description |
In Asiacrypt 2017, Rønjom et al. reported some interesting generic properties of SPNs, leading to what they call the Yoyo trick, and applied it to find the most efficient distinguishers on AES. In this work, we explore the Yoyo idea in distinguishing public permutations for the first time. We introduce the notion of nested zero difference pattern which extends the Yoyo idea and helps to compose it using improbable and impossible differential strategies to penetrate higher number of rounds. We devise a novel inside-out application of Yoyo which enables us to start the Yoyo game from an internal round. As an application, we investigate the AES-based public permutation AESQ used inside the authenticated cipher PAEQ. We achieve the first deterministic distinguisher of AESQ up to 8 rounds and the first 9-round distinguisher of AESQ that start from the first round with a practical complexity of around 226. We manage to augment Yoyo with improbable and impossible differentials leading to distinguishers on 9, 10, 12 rounds with complexities of about 22, 228, 2126 respectively. Further, with impossible differentials and a bi-directional Yoyo strategy, we obtain a 16-round impossible differential distinguisher with a complexity of 2126. Our results outperform all previous records on AESQ by a substantial margin. As another application, we apply the proposed strategies on AES in the known-key setting leading to one of the best 8-round known-key distinguisher with a complexity of 230. Finally, this work amplifies the scope of the Yoyo technique as a generic cryptanalysis tool.
|
topic |
AES AESQ Distinguisher PAEQ Yoyo Differential Cryptanalysis |
url |
https://tosc.iacr.org/index.php/ToSC/article/view/7363 |
work_keys_str_mv |
AT dhimansaha newyoyotrickswithaesbasedpermutations AT mostafizarrahman newyoyotrickswithaesbasedpermutations AT goutampaul newyoyotrickswithaesbasedpermutations |
_version_ |
1724244413964615680 |