On the key schedule strength of PRESENT

  • Authors:
  • Julio Cesar Hernandez-Castro;Pedro Peris-Lopez;Jean-Philippe Aumasson

  • Affiliations:
  • School of Computing, Portsmouth University, UK;Information Security & Privacy Lab, TU-Delft, The Netherlands;NagravisionSA, Cheseaux, Switzerland

  • Venue:
  • DPM'11 Proceedings of the 6th international conference, and 4th international conference on Data Privacy Management and Autonomous Spontaneus Security
  • Year:
  • 2011

Quantified Score

Hi-index 0.00

Visualization

Abstract

We present here the results of a playful research on how to measure the strength of a key schedule algorithm, with applications to PRESENT, including its two variants with 80 and 128 bit keys. We do not claim to have discovered any devastating weakness, but believe that some of the results presented, albeit controversial, could be of interest for other researchers investigating this cipher, notably for those working in impossible differentials and related key or slide attacks. Furthermore, in the case of PRESENT, key schedule features shown here may be exploited to attack some of the PRESENT-based hash functions. We carried out a probabilistic metaheuristic search for semi-equivalent keys, annihilators and entropy minima, and proposed a simple way of combining these results into a single value with a straightforward mathematical expression that could help in abstracting resistance to the set of presented analysis. Surprisingly, PRESENT−128 seems weaker than PRESENT−80 in the light of this new measure.