Decim – A new Stream Cipher for Hardware applications.pdfVIP

Decim – a new stream cipher for hardware applications ∗ 1 1 2 3 3,4 1 C. Berbain , O. Billet , A. Canteaut , N. Courtois , B. Debraize , H. Gilbert , 4 5 6 2 2 L. Goubin , A. Gouget , L. Granboulan , C. Lauradoux , M. Minier , T. Pornin7 and H. Sibert5 Abstract Decim is a new stream cipher designed for hardware applications with restricted resources. The design of the cipher is based on both a nonlinear filter LFSR and an irregular decimation mechanism recently introduced and called the ABSG. Apart from the security aspects, the design goal is to produce a stream cipher with a compact hardware implementation and operating at high rates. Excluding the tricky case of Time-Memory- Data trade-off attacks, the best attacks that have been identified by the authors are at least as difficult as exhaustive search. 1 Introduction Decim is a binary additive stream cipher, that is, a synchronous stream cipher in which the keystream Z , the plaintext M and the ciphertext C are sequences of binary digits; the sequence Z is added bitwise to the plaintext M to produce the ciphertext C . The most important aspect for the cipher is its resistance against different attacks. One of the most serious threat against the security of stream cipher systems is the class of algebraic attacks. It consists in finding a large number of algebraic relations that relate the running key and a linear combination of the secret key bits. When the cipher is clocked in a simple and/or easily predictable way, finding suc