Commutative Cryptanalysis Made Practical - Inria - Institut national de recherche en sciences et technologies du numérique
Journal Articles IACR Transactions on Symmetric Cryptology Year : 2023

Commutative Cryptanalysis Made Practical

Abstract

About 20 years ago, Wagner showed that most of the (then) known techniques used in the cryptanalysis of block ciphers were particular cases of what he called commutative diagram cryptanalysis. However, to the best of our knowledge, this general framework has not yet been leveraged to find concrete attacks. In this paper, we focus on a particular case of this framework and develop commutative cryptanalysis, whereby an attacker targeting a primitive E constructs affine permutations A and B such that E • A = B • E with a high probability, possibly for some weak keys. We develop the tools needed for the practical use of this technique: first, we generalize differential uniformity into "A-uniformity" and differential trails into "commutative trails", and second we investigate the commutative behaviour of S-box layers, matrix multiplications, and key additions. Equipped with these new techniques, we find probability-one distinguishers using only two chosen plaintexts for large classes of weak keys in both a modified Midori and in Scream. For the same weak keys, we deduce high probability truncated differentials that can cover an arbitrary number of rounds, but which do not correspond to any high probability differential trails. Similarly, we show the existence of a trade-off in our variant of Midori whereby the probability of the commutative trail can be decreased in order to increase the weak key density. We also show some statistical patterns in the AES super S-box that have a much higher probability than the best differentials, and which hold for a class of weak keys of density about 2^{−4.5}.
Fichier principal
Vignette du fichier
ToSC2023_4_12.pdf (997.92 Ko) Télécharger le fichier
Origin Files produced by the author(s)

Dates and versions

hal-04277884 , version 1 (09-11-2023)
hal-04277884 , version 2 (27-11-2023)
hal-04277884 , version 3 (18-12-2023)

Licence

Identifiers

Cite

Jules Baudrin, Patrick Felke, Gregor Leander, Patrick Neumann, Léo Perrin, et al.. Commutative Cryptanalysis Made Practical. IACR Transactions on Symmetric Cryptology, 2023, 2023 (4), pp.299-329. ⟨10.46586/tosc.v2023.i4.299-329⟩. ⟨hal-04277884v3⟩
156 View
88 Download

Altmetric

Share

More