Multiset collision attacks on reduced-round SNOW 3G and SNOW 3G⊕

Authors:
Alex Biryukov;Deike Priemuth-Schmid;Bin Zhang
Affiliations:
University of Luxembourg;University of Luxembourg;University of Luxembourg
Venue:
ACNS'10 Proceedings of the 8th international conference on Applied cryptography and network security
Year:
2010

Citing 4
Cited 0

A New Version of the Stream Cipher SNOW

SAC '02 Revised Papers from the 9th Annual International Workshop on Selected Areas in Cryptography
Structural Cryptanalysis of SASAS

EUROCRYPT '01 Proceedings of the International Conference on the Theory and Application of Cryptographic Techniques: Advances in Cryptology
Improved linear distinguishers for SNOW 2.0

FSE'06 Proceedings of the 13th international conference on Fast Software Encryption
Resistance of SNOW 2.0 against algebraic attacks

CT-RSA'05 Proceedings of the 2005 international conference on Topics in Cryptology

Quantified Score

Hi-index	0.00

Visualization

Abstract

The stream cipher SNOW 3G designed in 2006 by ETSI/SAGE is a base algorithm for the second set of 3GPP confidentiality and integrity algorithms. In this paper we study the resynchronization mechanism of SNOW 3G and of a similar cipher SNOW 3G⊕ using multiset collision attacks. For SNOW 3G we show a simple 13-round multiset distinguisher with complexity of 28 steps. We show full key recovery chosen IV resynchronization attacks for up to 18 out of 33 initialization rounds of SNOW3G⊕ with a complexity of 257 to generate the data and 253 steps of analysis.