How Not to Combine RC4 States

Subhadeep Banik; Sonu Jha

doi:10.1007/978-3-319-24126-5_6

How Not to Combine RC4 States

Subhadeep Banik, Sonu Jha

Department of Applied Mathematics and Computer Science

National Informatics Center

Research output: Chapter in Book/Report/Conference proceeding › Article in proceedings › Research › peer-review

Abstract

Over the past few years, an attractive design paradigm has emerged, that aims to produce new stream cipher designs, by combining one or more independently produced RC4 states. The ciphers so produced turn out to be faster than RC4 on any software platform, mainly because the average number of internal operations used in the cipher per byte of keystream produced is usually lesser than RC4. One of the main efforts of the designers is to ensure that the existing weaknesses of RC4 are not carried over to the new ciphers so designed. In this work we will look at two such ciphers RC4B (proposed by Zhang et. al.) and Quad-RC4/m-RC4 (proposed by Maitra et. al.). We will propose distinguishing attacks against all these ciphers, and look at certain design flaws that made these ciphers vulnerable.

Original language	English
Title of host publication	Proceedings of the 5th International Conference on Security, Privacy, and Applied Cryptography Engineering (SPACE 2015)
Editors	Rajat Subhra Chakraborty, Peter Schwabe, Jon Solworth
Publisher	Springer
Publication date	2015
Pages	95-112
ISBN (Print)	978-3-319-24125-8
ISBN (Electronic)	978-3-319-24126-5
DOIs	https://doi.org/10.1007/978-3-319-24126-5_6
Publication status	Published - 2015
Event	5th International Conference on Security, Privacy, and Applied Cryptography Engineering (SPACE 2015) - Jaipur, Rajasthan, India Duration: 3 Oct 2015 → 7 Oct 2015 Conference number: 5 http://cse.iitkgp.ac.in/conf/SPACE2015/

Conference

Conference	5th International Conference on Security, Privacy, and Applied Cryptography Engineering (SPACE 2015)
Number	5
Country/Territory	India
City	Jaipur, Rajasthan
Period	03/10/2015 → 07/10/2015
Internet address	http://cse.iitkgp.ac.in/conf/SPACE2015/

Series	Lecture Notes in Computer Science
Volume	9354
ISSN	0302-9743

Keywords

RC4
RC4B
Quad-RC4
m-RC4
Distinguishing Attacks
Stream Cipher

Access to Document

10.1007/978-3-319-24126-5_6

OpenUrl availability

Full text

Cite this

@inproceedings{74db33ff5da347cc98cdfadd49142df9,

title = "How Not to Combine RC4 States",

abstract = "Over the past few years, an attractive design paradigm has emerged, that aims to produce new stream cipher designs, by combining one or more independently produced RC4 states. The ciphers so produced turn out to be faster than RC4 on any software platform, mainly because the average number of internal operations used in the cipher per byte of keystream produced is usually lesser than RC4. One of the main efforts of the designers is to ensure that the existing weaknesses of RC4 are not carried over to the new ciphers so designed. In this work we will look at two such ciphers RC4B (proposed by Zhang et. al.) and Quad-RC4/m-RC4 (proposed by Maitra et. al.). We will propose distinguishing attacks against all these ciphers, and look at certain design flaws that made these ciphers vulnerable.",

keywords = "RC4, RC4B, Quad-RC4, m-RC4, Distinguishing Attacks, Stream Cipher",

author = "Subhadeep Banik and Sonu Jha",

year = "2015",

doi = "10.1007/978-3-319-24126-5_6",

language = "English",

isbn = "978-3-319-24125-8",

series = "Lecture Notes in Computer Science",

publisher = "Springer",

pages = "95--112",

editor = "Chakraborty, {Rajat Subhra } and Schwabe, {Peter } and Jon Solworth",

booktitle = "Proceedings of the 5th International Conference on Security, Privacy, and Applied Cryptography Engineering (SPACE 2015)",

note = "5th International Conference on Security, Privacy, and Applied Cryptography Engineering (SPACE 2015), SPACE ; Conference date: 03-10-2015 Through 07-10-2015",

url = "http://cse.iitkgp.ac.in/conf/SPACE2015/",

}

Banik, S & Jha, S 2015, How Not to Combine RC4 States. in RS Chakraborty, P Schwabe & J Solworth (eds), Proceedings of the 5th International Conference on Security, Privacy, and Applied Cryptography Engineering (SPACE 2015). Springer, Lecture Notes in Computer Science, vol. 9354, pp. 95-112, 5th International Conference on Security, Privacy, and Applied Cryptography Engineering (SPACE 2015), Jaipur, Rajasthan, India, 03/10/2015. https://doi.org/10.1007/978-3-319-24126-5_6

How Not to Combine RC4 States. / Banik, Subhadeep; Jha, Sonu.
Proceedings of the 5th International Conference on Security, Privacy, and Applied Cryptography Engineering (SPACE 2015). ed. / Rajat Subhra Chakraborty; Peter Schwabe; Jon Solworth. Springer, 2015. p. 95-112 (Lecture Notes in Computer Science, Vol. 9354).

Research output: Chapter in Book/Report/Conference proceeding › Article in proceedings › Research › peer-review

TY - GEN

T1 - How Not to Combine RC4 States

AU - Banik, Subhadeep

AU - Jha, Sonu

N1 - Conference code: 5

PY - 2015

Y1 - 2015

N2 - Over the past few years, an attractive design paradigm has emerged, that aims to produce new stream cipher designs, by combining one or more independently produced RC4 states. The ciphers so produced turn out to be faster than RC4 on any software platform, mainly because the average number of internal operations used in the cipher per byte of keystream produced is usually lesser than RC4. One of the main efforts of the designers is to ensure that the existing weaknesses of RC4 are not carried over to the new ciphers so designed. In this work we will look at two such ciphers RC4B (proposed by Zhang et. al.) and Quad-RC4/m-RC4 (proposed by Maitra et. al.). We will propose distinguishing attacks against all these ciphers, and look at certain design flaws that made these ciphers vulnerable.

AB - Over the past few years, an attractive design paradigm has emerged, that aims to produce new stream cipher designs, by combining one or more independently produced RC4 states. The ciphers so produced turn out to be faster than RC4 on any software platform, mainly because the average number of internal operations used in the cipher per byte of keystream produced is usually lesser than RC4. One of the main efforts of the designers is to ensure that the existing weaknesses of RC4 are not carried over to the new ciphers so designed. In this work we will look at two such ciphers RC4B (proposed by Zhang et. al.) and Quad-RC4/m-RC4 (proposed by Maitra et. al.). We will propose distinguishing attacks against all these ciphers, and look at certain design flaws that made these ciphers vulnerable.

KW - RC4

KW - RC4B

KW - Quad-RC4

KW - m-RC4

KW - Distinguishing Attacks

KW - Stream Cipher

U2 - 10.1007/978-3-319-24126-5_6

DO - 10.1007/978-3-319-24126-5_6

M3 - Article in proceedings

SN - 978-3-319-24125-8

T3 - Lecture Notes in Computer Science

SP - 95

EP - 112

BT - Proceedings of the 5th International Conference on Security, Privacy, and Applied Cryptography Engineering (SPACE 2015)

A2 - Chakraborty, Rajat Subhra

A2 - Schwabe, Peter

A2 - Solworth, Jon

PB - Springer

T2 - 5th International Conference on Security, Privacy, and Applied Cryptography Engineering (SPACE 2015)

Y2 - 3 October 2015 through 7 October 2015

ER -

How Not to Combine RC4 States

Abstract

Conference

Keywords

Access to Document

OpenUrl availability

Fingerprint

Cite this