2008 Differential Distinguishing Attack on the Shannon Stream Cipher Based on Fault Analysis.pptVIP

Differential Distinguishing Attack on the Shannon Stream Cipher Based on Fault Analysis Outline Introduction Description of the Shannon Differential Properties of the f2 Function Fault Analysis Our Differential Distinguishing Attack Implementation Results Conclusion Introduction The Shannon stream cipher was proposed by Philip Hawkes et al. for Ecrypt/eStream competitive. A Brief Description Keystream Generation Mode 1) rt+1[i] ← rt[i+1] for i = 1...14 2) rt+1[15] ← f1(rt[12] ? rt[13] ? Konst) ? (rt[0] 1) f Function f : (A,B,C,D are fixed numbers) t ←