[26459] in cryptography@c2.net mail archive
Algebraic Attacks on Block Ciphers
daemon@ATHENA.MIT.EDU (James Muir)
Thu May 25 13:39:38 2006
X-Original-To: cryptography@metzdowd.com
X-Original-To: cryptography@metzdowd.com
Date: Thu, 25 May 2006 10:43:39 -0400
From: James Muir <jamuir@scs.carleton.ca>
To: cryptography@metzdowd.com
This may interest some list members:
http://eprint.iacr.org/2006/168
Cryptology ePrint Archive: Report 2006/168
How Fast can be Algebraic Attacks on Block Ciphers ?
Nicolas T. Courtois
Abstract. In this paper we give a specification of a new block cipher
that can be called the Courtois Toy Cipher (CTC). It is quite simple,
and yet very much like any other known block cipher. If the parameters
are large enough, it should evidently be secure against all known attack
methods. However, we are not proposing a new method for encrypting
sensitive data, but rather a research tool that should allow us (and
other researchers) to experiment with algebraic attacks on block ciphers
and obtain interesting results using a PC with reasonable quantity of
RAM. For this reason the S-box of this cipher has only 3-bits, which is
quite small. Ciphers with very small S-boxes are believed quite secure,
for example the Serpent S-box has only 4 bits, and in DES all the
S-boxes have 4 output bits. The AES S-box is not quite as small but can
be described (in many ways) by a very small systems of equations with
only a few monomials (and this fact can also be exploited in algebraic
cryptanalysis). We believe that results on algebraic cryptanalysis of
this cipher will have very deep implications for the security of ciphers
in general.
---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com
