Rotational Rebound Attacks on Reduced Skein

Publication: Research - peer-reviewArticle in proceedings – Annual report year: 2010

View graph of relations

In this paper we combine a recent rotational cryptanalysis with the rebound attack, which results in the best cryptanalysis of Skein, a candidate for the SHA-3 competition. The rebound attack approach was so far only applied to AES-like constructions. For the first time, we show that this approach can also be applied to very different constructions. In more detail, we develop a number of techniques that extend the reach of both the inbound and the outbound phase, leading to cryptanalytic results on an estimated 53/57 out of the 72 rounds of the Skein-256/512 compression function and the Threefish cipher. The new techniques include an analytical search for optimal input values in the rotational cryptanalysis, which allows to extend the outbound phase of the attack with a precomputation phase, an approach never used in any rebound-style attack before. Further we show how to combine multiple inside-out computations and neutral bits in the inbound phase of the rebound attack, and give well-defined rotational distinguishers as certificates of weaknesses for the compression functions and block ciphers.
Original languageEnglish
Title of host publicationAdvances in Cryptology - ASIACRYPT 2010 : 16th International Conference on the Theory and Application of Cryptology and Information Security, Singapore, December 5-9, 2010. Proceedings
EditorsMasayuki Abe
Publication date2010
ISBN (print)978-3-642-17372
StatePublished - 2010
EventAsiacrypt 2010 - Singapore, Singapore


ConferenceAsiacrypt 2010
???event.location???Swissôtel Merchant Court, Singapore
NameLecture Notes in Computer Science
ISSN (Print)0302-9743


  • Skein, Hash function, Rotational cryptanalysis, Rebound attack, Distinguisher
Download as:
Download as PDF
Select render style:
Download as HTML
Select render style:
Download as Word
Select render style:

ID: 12160098