Slid Pairs in Salsa20 and Trivium TeX Export

@misc{citeulike:3380646, abstract = {The stream ciphers Salsa20 and Trivium are two of the finalists of the eSTREAM project which are in the final portfolio of new promising stream ciphers. In this paper we show that initialization and key-stream generation of these ciphers is {\em slidable}, i.e. one can find distinct (Key, IV) pairs that produce identical (or closely related) key-streams. There are \$2^{256}\$ and more then \$2^{39}\$ such pairs in Salsa20 and Trivium respectively. We write out and solve the non-linear equations which describe such related (Key, IV) pairs. This allows us to sample the space of such related pairs efficiently as well as detect such pairs in large portions of key-stream very efficiently. We show that Salsa20 does not have 256-bit security if one considers general birthday and related key distinguishing and key-recovery attacks.}, author = {Priemuth-Schmid, Deike and Biryukov, Alex}, citeulike-article-id = {3380646}, citeulike-linkout-0 = {http://eprint.iacr.org/2008/405}, day = {23}, howpublished = {Cryptology ePrint Archive, Report 2008/405}, keywords = {cipher, cryptography, stream-cipher, symmetric}, month = {Sep}, posted-at = {2008-10-06 21:22:33}, priority = {0}, title = {Slid Pairs in Salsa20 and Trivium}, url = {http://eprint.iacr.org/2008/405}, year = {2008} }

TY - ELEC ID - citeulike:3380646 L3 - citeulike-article-id:3380646 N2 - The stream ciphers Salsa20 and Trivium are two of the finalists of the eSTREAM project which are in the final portfolio of new promising stream ciphers. In this paper we show that initialization and key-stream generation of these ciphers is {\em slidable}, i.e. one can find distinct (Key, IV) pairs that produce identical (or closely related) key-streams. There are $2^{256}$ and more then $2^{39}$ such pairs in Salsa20 and Trivium respectively. We write out and solve the non-linear equations which describe such related (Key, IV) pairs. This allows us to sample the space of such related pairs efficiently as well as detect such pairs in large portions of key-stream very efficiently. We show that Salsa20 does not have 256-bit security if one considers general birthday and related key distinguishing and key-recovery attacks. TI - Slid Pairs in Salsa20 and Trivium KW - cipher KW - cryptography KW - stream-cipher KW - symmetric AU - Priemuth-Schmid, Deike AU - Biryukov, Alex PY - 2008/Sep/23/ UR - http://eprint.iacr.org/2008/405 ER -