Cryptanalysis of ARMADILLO2

Mohamed Ahmed Abdelraheem; Céline Blondeau; María Naya-Plasencia; Marion Videau; Erik Zenner

doi:10.1007/978-3-642-25385-0_17

Cryptanalysis of ARMADILLO2

Mohamed Ahmed Abdelraheem
, Céline Blondeau
, María Naya-Plasencia
, Marion Videau
, Erik Zenner

Research output: Chapter in Book/Report/Conference proceeding › Article in proceedings › Research › peer-review

304 Downloads (Orbit)

Abstract

ARMADILLO2 is the recommended variant of a multi-purpose cryptographic primitive dedicated to hardware which has been proposed by Badel et al. in [1]. In this paper, we describe a meet-in-themiddle technique relying on the parallel matching algorithm that allows us to invert the ARMADILLO2 function. This makes it possible to perform a key recovery attack when used as a FIL-MAC. A variant of this attack can also be applied to the stream cipher derived from the PRNG mode. Finally we propose a (second) preimage attack when used as a hash function.We have validated our attacks by implementing cryptanalysis on scaled variants. The experimental results match the theoretical complexities. In addition to these attacks, we present a generalization of the parallel matching algorithm, which can be applied in a broader context than attacking ARMADILLO2.

Original language	English
Title of host publication	Advances in Cryptology
Editors	Dong Hoon Lee, Xiaoyun Wang
Publisher	Springer
Publication date	2011
Pages	308-326
ISBN (Print)	978-3-642-25384-3
DOIs	https://doi.org/10.1007/978-3-642-25385-0_17
Publication status	Published - 2011
Event	17th International Conference on the Theory and Application of Cryptology and Information Security - Seoul, Korea, Republic of Duration: 4 Dec 2011 → 8 Dec 2011 Conference number: 17

Conference

Conference	17th International Conference on the Theory and Application of Cryptology and Information Security
Number	17
Country/Territory	Korea, Republic of
City	Seoul
Period	04/12/2011 → 08/12/2011

Series	Lecture Notes in Computer Science
Number	7073

Keywords

Preimage attack
Parallel matching algorithm
Meet-in-the-middle
ARMADILLO2
Key recovery attack

Access to Document

10.1007/978-3-642-25385-0_17

Prod21324200741617Final published version, 435 KB

OpenUrl availability

Full text

Cite this

@inproceedings{989c7abd00a1451d814ae9fd2eec3c7b,

title = "Cryptanalysis of ARMADILLO2",

abstract = "ARMADILLO2 is the recommended variant of a multi-purpose cryptographic primitive dedicated to hardware which has been proposed by Badel et al. in [1]. In this paper, we describe a meet-in-themiddle technique relying on the parallel matching algorithm that allows us to invert the ARMADILLO2 function. This makes it possible to perform a key recovery attack when used as a FIL-MAC. A variant of this attack can also be applied to the stream cipher derived from the PRNG mode. Finally we propose a (second) preimage attack when used as a hash function.We have validated our attacks by implementing cryptanalysis on scaled variants. The experimental results match the theoretical complexities. In addition to these attacks, we present a generalization of the parallel matching algorithm, which can be applied in a broader context than attacking ARMADILLO2.",

keywords = "Preimage attack, Parallel matching algorithm, Meet-in-the-middle, ARMADILLO2, Key recovery attack",

author = "Abdelraheem, \{Mohamed Ahmed\} and C{\'e}line Blondeau and Mar{\'i}a Naya-Plasencia and Marion Videau and Erik Zenner",

year = "2011",

doi = "10.1007/978-3-642-25385-0\_17",

language = "English",

isbn = "978-3-642-25384-3",

series = "Lecture Notes in Computer Science",

publisher = "Springer",

number = "7073",

pages = "308--326",

editor = "Lee, \{Dong Hoon\} and Xiaoyun Wang",

booktitle = "Advances in Cryptology",

note = "17th International Conference on the Theory and Application of Cryptology and Information Security, ASIACRYPT 2011 ; Conference date: 04-12-2011 Through 08-12-2011",

}

Abdelraheem, MA, Blondeau, C, Naya-Plasencia, M, Videau, M & Zenner, E 2011, Cryptanalysis of ARMADILLO2. in DH Lee & X Wang (eds), Advances in Cryptology. Springer, Lecture Notes in Computer Science, no. 7073, pp. 308-326, 17th International Conference on the Theory and Application of Cryptology and Information Security, Seoul, Korea, Republic of, 04/12/2011. https://doi.org/10.1007/978-3-642-25385-0_17

TY - GEN

T1 - Cryptanalysis of ARMADILLO2

AU - Abdelraheem, Mohamed Ahmed

AU - Blondeau, Céline

AU - Naya-Plasencia, María

AU - Videau, Marion

AU - Zenner, Erik

N1 - Conference code: 17

PY - 2011

Y1 - 2011

N2 - ARMADILLO2 is the recommended variant of a multi-purpose cryptographic primitive dedicated to hardware which has been proposed by Badel et al. in [1]. In this paper, we describe a meet-in-themiddle technique relying on the parallel matching algorithm that allows us to invert the ARMADILLO2 function. This makes it possible to perform a key recovery attack when used as a FIL-MAC. A variant of this attack can also be applied to the stream cipher derived from the PRNG mode. Finally we propose a (second) preimage attack when used as a hash function.We have validated our attacks by implementing cryptanalysis on scaled variants. The experimental results match the theoretical complexities. In addition to these attacks, we present a generalization of the parallel matching algorithm, which can be applied in a broader context than attacking ARMADILLO2.

AB - ARMADILLO2 is the recommended variant of a multi-purpose cryptographic primitive dedicated to hardware which has been proposed by Badel et al. in [1]. In this paper, we describe a meet-in-themiddle technique relying on the parallel matching algorithm that allows us to invert the ARMADILLO2 function. This makes it possible to perform a key recovery attack when used as a FIL-MAC. A variant of this attack can also be applied to the stream cipher derived from the PRNG mode. Finally we propose a (second) preimage attack when used as a hash function.We have validated our attacks by implementing cryptanalysis on scaled variants. The experimental results match the theoretical complexities. In addition to these attacks, we present a generalization of the parallel matching algorithm, which can be applied in a broader context than attacking ARMADILLO2.

KW - Preimage attack

KW - Parallel matching algorithm

KW - Meet-in-the-middle

KW - ARMADILLO2

KW - Key recovery attack

U2 - 10.1007/978-3-642-25385-0_17

DO - 10.1007/978-3-642-25385-0_17

M3 - Article in proceedings

SN - 978-3-642-25384-3

T3 - Lecture Notes in Computer Science

SP - 308

EP - 326

BT - Advances in Cryptology

A2 - Lee, Dong Hoon

A2 - Wang, Xiaoyun

PB - Springer

T2 - 17th International Conference on the Theory and Application of Cryptology and Information Security

Y2 - 4 December 2011 through 8 December 2011

ER -

Cryptanalysis of ARMADILLO2

Abstract

Conference

Keywords

Access to Document

OpenUrl availability

Fingerprint

Cite this