The LOCAL attack: Cryptanalysis of the authenticated encryption scheme ALE

Dmitry Khovratovich; Christian Rechberger

doi:10.1007/978-3-662-43414-7_9

The LOCAL attack: Cryptanalysis of the authenticated encryption scheme ALE

Dmitry Khovratovich, Christian Rechberger

Department of Applied Mathematics and Computer Science

University of Luxembourg

Research output: Chapter in Book/Report/Conference proceeding › Article in proceedings › Research › peer-review

Abstract

We show how to produce a forged (ciphertext, tag) pair for the scheme ALE with data and time complexity of 2102 ALE encryptions of short messages and the same number of authentication attempts. We use a differential attack based on a local collision, which exploits the availability of extracted state bytes to the adversary. Our approach allows for a time-data complexity tradeoff, with an extreme case of a forgery produced after 2119 attempts and based on a single authenticated message. Our attack is further turned into a state recovery and a universal forgery attack with a time complexity of 2120 verification attempts using only a single authenticated 48-byte message.

Original language	English
Title of host publication	Selected Areas in Cryptography - SAC 2013. Revised Selected Papers
Publisher	Springer
Publication date	2014
Pages	174-184
ISBN (Print)	978-3-662-43413-0
ISBN (Electronic)	978-3-662-43414-7
DOIs	https://doi.org/10.1007/978-3-662-43414-7_9
Publication status	Published - 2014
Event	20th International Workshop on Selected Areas of Cryptography - Burnaby, Canada Duration: 14 Aug 2013 → 16 Aug 2013 Conference number: 20

Conference

Conference	20th International Workshop on Selected Areas of Cryptography
Number	20
Country/Territory	Canada
City	Burnaby
Period	14/08/2013 → 16/08/2013

Series	Lecture Notes in Computer Science
Volume	8282
ISSN	0302-9743

Keywords

Data Encryption
Systems and Data Security
Algorithm Analysis and Problem Complexity
Coding and Information Theory

Access to Document

10.1007/978-3-662-43414-7_9

OpenUrl availability

Full text

Cite this

@inproceedings{6d97b3ec62394b1a9c41fa732628cc6f,

title = "The LOCAL attack: Cryptanalysis of the authenticated encryption scheme ALE",

abstract = "We show how to produce a forged (ciphertext, tag) pair for the scheme ALE with data and time complexity of 2102 ALE encryptions of short messages and the same number of authentication attempts. We use a differential attack based on a local collision, which exploits the availability of extracted state bytes to the adversary. Our approach allows for a time-data complexity tradeoff, with an extreme case of a forgery produced after 2119 attempts and based on a single authenticated message. Our attack is further turned into a state recovery and a universal forgery attack with a time complexity of 2120 verification attempts using only a single authenticated 48-byte message. ",

keywords = "Data Encryption, Systems and Data Security, Algorithm Analysis and Problem Complexity, Coding and Information Theory",

author = "Dmitry Khovratovich and Christian Rechberger",

year = "2014",

doi = "10.1007/978-3-662-43414-7_9",

language = "English",

isbn = "978-3-662-43413-0",

series = "Lecture Notes in Computer Science",

publisher = "Springer",

pages = "174--184",

booktitle = "Selected Areas in Cryptography - SAC 2013. Revised Selected Papers",

note = "20th International Workshop on Selected Areas of Cryptography, SAC 2013 ; Conference date: 14-08-2013 Through 16-08-2013",

}

Khovratovich, D & Rechberger, C 2014, The LOCAL attack: Cryptanalysis of the authenticated encryption scheme ALE. in Selected Areas in Cryptography - SAC 2013. Revised Selected Papers. Springer, Lecture Notes in Computer Science, vol. 8282, pp. 174-184, 20th International Workshop on Selected Areas of Cryptography, Burnaby, Canada, 14/08/2013. https://doi.org/10.1007/978-3-662-43414-7_9

The LOCAL attack: Cryptanalysis of the authenticated encryption scheme ALE. / Khovratovich, Dmitry; Rechberger, Christian.
Selected Areas in Cryptography - SAC 2013. Revised Selected Papers. Springer, 2014. p. 174-184 (Lecture Notes in Computer Science, Vol. 8282).

Research output: Chapter in Book/Report/Conference proceeding › Article in proceedings › Research › peer-review

TY - GEN

T1 - The LOCAL attack: Cryptanalysis of the authenticated encryption scheme ALE

AU - Khovratovich, Dmitry

AU - Rechberger, Christian

N1 - Conference code: 20

PY - 2014

Y1 - 2014

N2 - We show how to produce a forged (ciphertext, tag) pair for the scheme ALE with data and time complexity of 2102 ALE encryptions of short messages and the same number of authentication attempts. We use a differential attack based on a local collision, which exploits the availability of extracted state bytes to the adversary. Our approach allows for a time-data complexity tradeoff, with an extreme case of a forgery produced after 2119 attempts and based on a single authenticated message. Our attack is further turned into a state recovery and a universal forgery attack with a time complexity of 2120 verification attempts using only a single authenticated 48-byte message.

AB - We show how to produce a forged (ciphertext, tag) pair for the scheme ALE with data and time complexity of 2102 ALE encryptions of short messages and the same number of authentication attempts. We use a differential attack based on a local collision, which exploits the availability of extracted state bytes to the adversary. Our approach allows for a time-data complexity tradeoff, with an extreme case of a forgery produced after 2119 attempts and based on a single authenticated message. Our attack is further turned into a state recovery and a universal forgery attack with a time complexity of 2120 verification attempts using only a single authenticated 48-byte message.

KW - Data Encryption

KW - Systems and Data Security

KW - Algorithm Analysis and Problem Complexity

KW - Coding and Information Theory

U2 - 10.1007/978-3-662-43414-7_9

DO - 10.1007/978-3-662-43414-7_9

M3 - Article in proceedings

SN - 978-3-662-43413-0

T3 - Lecture Notes in Computer Science

SP - 174

EP - 184

BT - Selected Areas in Cryptography - SAC 2013. Revised Selected Papers

PB - Springer

T2 - 20th International Workshop on Selected Areas of Cryptography

Y2 - 14 August 2013 through 16 August 2013

ER -

The LOCAL attack: Cryptanalysis of the authenticated encryption scheme ALE

Abstract

Conference

Keywords

Access to Document

OpenUrl availability

Fingerprint

Cite this