Salsa20 Cryptanalysis: New Moves and Revisiting Old Styles - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2016

Salsa20 Cryptanalysis: New Moves and Revisiting Old Styles


In this paper, we revisit some existing techniques in Salsa20 cryptanalysis, and provide some new ideas as well. As a new result, we explain how a valid initial state can be obtained from a Salsa20 state after one round. This helps in studying the non-randomness of Salsa20 after 5 rounds. In particular, it can be seen that the 5-round bias reported by Fischer et al. (Indocrypt 2006) is a special case of our analysis. Towards improving the existing results, we revisit the idea of Probabilistic Neutral Bit (PNB) and how a proper choice of certain parameters reduce the complexity of the existing attacks. For cryptanalysis against 8-round Salsa20, we could achieve the key search complexity of 2 247.2 compared to the earlier results of 2 251 (FSE 2008) and 2 250 (ICISC 2012).
Fichier principal
Vignette du fichier
wcc15-fr1-3.pdf (281.63 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-01276506 , version 1 (19-02-2016)


  • HAL Id : hal-01276506 , version 1


Subhamoy Maitra, Goutam Paul, Willi Meier. Salsa20 Cryptanalysis: New Moves and Revisiting Old Styles. The 9th International Workshop on Coding and Cryptography 2015 WCC2015, Anne Canteaut, Gaëtan Leurent, Maria Naya-Plasencia, Apr 2015, Paris, France. ⟨hal-01276506⟩


129 View
158 Download


Gmail Facebook Twitter LinkedIn More