Cryptanalysis of grain

Come Berbain, Henri Gilbert, Alexander Maximov

Research output: Chapter in Book/Report/Conference proceedingPaper in conference proceedingResearchpeer-review

44 Citations (SciVal)

Abstract

Grain [11] is a lightweight stream cipher proposed by M. Hell, T. Johansson, and W. Meier to the eSTREAM call for stream cipher proposals of the European project ECRYPT [5]. Its 160-bit internal state is divided into a LFSR and an NFSR,of length 80 bits each. A filtering boolean function is used to derive each keystream bit from the internal state. By combining linear approximations of the feedback function of the NFSR and of the filtering function, it is possible to derive linear approximation equations involving the keystream and the LFSR initial state. We present a key recovery attack against Grain which requires 2 43 computations and 2 38 keystream bits to determine the 80-bit key.
Original languageEnglish
Title of host publicationLecture Notes in Computer Science (Fast Software Encryption,. Revised selected papers)
PublisherSpringer
Pages15-29
Volume4047
ISBN (Print)978-3-540-36597-6
DOIs
Publication statusPublished - 2006
Event13th International Workshop, FSE 2006 - Graz, Austria
Duration: 2006 Mar 152006 Mar 17

Publication series

Name
Volume4047
ISSN (Print)0302-9743
ISSN (Electronic)1611-3349

Conference

Conference13th International Workshop, FSE 2006
Country/TerritoryAustria
CityGraz
Period2006/03/152006/03/17

Subject classification (UKÄ)

  • Electrical Engineering, Electronic Engineering, Information Engineering

Keywords

  • correlation attack
  • Walsh transform
  • stream cipher

Fingerprint

Dive into the research topics of 'Cryptanalysis of grain'. Together they form a unique fingerprint.

Cite this