International Association for Cryptologic Research

International Association
for Cryptologic Research

CryptoDB

Rotational Differential-Linear Distinguishers of ARX Ciphers with Arbitrary Output Linear Masks

Authors:
Zhongfeng Niu , State Key Laboratory of Information Security, Institute of Information Engineering, Chinese Academy of Sciences
Siwei Sun , School of Cryptology, University of Chinese Academy of Sciences
Yunwen Liu , College of Liberal arts and Science, National University of Defense Technology
Chao Li , College of Liberal arts and Science, National University of Defense Technology
Download:
Search ePrint
Search Google
Presentation: Slides
Conference: CRYPTO 2022
Abstract: The rotational differential-linear attacks, proposed at EUROCRYPT 2021, is a generalization of differential-linear attacks by replacing the differential part of the attacks with rotational differentials. At EUROCRYPT 2021, Liu et al. presented a method based on Morawiecki et al.’s technique (FSE 2013) for evaluating the rotational differential-linear correlations for the special cases where the output linear masks are unit vectors. With this method, some powerful (rotational) differential-linear distinguishers with output linear masks being unit vectors against Friet, Xoodoo, and Alzette were discovered. However, how to compute the rotational differential-linear correlations for arbitrary output masks was left open. In this work, we partially solve this open problem by presenting an efficient algorithm for computing the (rotational) differential-linear correlation of modulo additions for arbitrary output linear masks, based on which a technique for evaluating the (rotational) differential-linear correlation of ARX ciphers is derived. We apply the technique to Alzette, SipHash, Chacha, and Speck. As a result, significantly improved (rotational) differential-linear distinguishers including deterministic ones are identified. All results of this work are practical and experimentally verified to confirm the validity of our methods. In addition, we try to explain the experimental distinguishers employed in FSE 2008, FSE 2016, and CRYPTO 2020 against Chacha. The predicted correlations are close to the experimental ones.
Video from CRYPTO 2022
BibTeX
@inproceedings{crypto-2022-32106,
  title={Rotational Differential-Linear Distinguishers of ARX Ciphers with Arbitrary Output Linear Masks},
  publisher={Springer-Verlag},
  author={Zhongfeng Niu and Siwei Sun and Yunwen Liu and Chao Li},
  year=2022
}