On the Origin of Yet another Channel

Investor logo

Warning

This publication doesn't include Institute of Computer Science. It includes Faculty of Informatics. Official publication website can be found on muni.cz.
Authors

ŠVENDA Petr MATYÁŠ Václav

Year of publication 2013
Type Article in Proceedings
Conference Proceedings of Security Protocols XXI
MU Faculty or unit

Faculty of Informatics

Citation
web Paper supplementary data
Doi http://dx.doi.org/10.1007/978-3-642-41717-7_26
Field Informatics
Keywords eStream; genetic programming; random distinguisher; randomness statistical testing; software circuit
Description Cryptanalysis of a cryptographic function like stream, block or hash function usually requires human cryptanalytical skills and labour. However, some automation is possible -- e.g., by randomness testing suites like NIST/Diehard that can be applied to test statistical properties of cryptographic function outputs. Yet such testing suites are limited only to predefined statistical functions. We propose more open approach based on combination of software circuits and evolutionary algorithms to search for unwanted statistical properties like next bit predictability or random data non-distinguishability. Design of a software circuit acting as a testing function is automatically evolved by a stochastic optimization algorithm and uses the potentially unknown ``other channel'' leaking information during cryptographic function evaluation. We tested this approach on candidate algorithms for SHA-3 and eStream competitions with comparable (but slightly worse) results as STS NIST and Diehard tests w.r.t. the number of rounds of the inspected algorithm, where tests are still able to detect unwanted statistical properties in output. Additionally, the proposed approach is not limited only to assess randomness-like properties in function output, but can be also used for other tests like whether a function is invertible or how does its avalanche effect degrade.
Related projects:

You are running an old browser version. We recommend updating your browser to its latest version.

More info