Internal Symmetries and Linear Properties: Full-permutation Distinguishers and Improved Collisions on Gimli - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Journal Articles Journal of Cryptology Year : 2021

Internal Symmetries and Linear Properties: Full-permutation Distinguishers and Improved Collisions on Gimli

Abstract

Gimli is a family of cryptographic primitives (both a hash function and an AEAD scheme) that has been selected for the second round of the NIST competition for standardizing new lightweight designs. The candidate Gimli is based on the permutation Gimli, which was presented at CHES 2017. In this paper, we study the security of both the permutation and the constructions that are based on it. We exploit the slow diffusion in Gimli and its internal symmetries to build, for the first time, a distinguisher on the full permutation of complexity 2 64. We also provide a practical distinguisher on 23 out of the full 24 rounds of Gimli that has been implemented. Next, we give (full state) collision and semi-free-start collision attacks on Gimli-Hash, reaching respectively up to 12 and 18 rounds. On the practical side, we compute a collision on 8-round Gimli-Hash. In the quantum setting, these attacks reach 2 more rounds. Finally, we perform the first study of linear trails in Gimli, and we find a linear distinguisher on the full permutation.
Fichier principal
Vignette du fichier
gimli_joc.pdf (726.75 Ko) Télécharger le fichier
Origin Files produced by the author(s)

Dates and versions

hal-03528843 , version 1 (17-01-2022)

Identifiers

Cite

Antonio Florez-Gutierrez, Gaëtan Leurent, María Naya-Plasencia, Léo Perrin, André Schrottenloher, et al.. Internal Symmetries and Linear Properties: Full-permutation Distinguishers and Improved Collisions on Gimli. Journal of Cryptology, 2021, 34 (4), pp.45. ⟨10.1007/s00145-021-09413-z⟩. ⟨hal-03528843⟩

Collections

INRIA INRIA2
55 View
114 Download

Altmetric

Share

Gmail Mastodon Facebook X LinkedIn More