Cryptanalysis of Stream Cipher COS(2, 128) Mode I

  • Authors:
  • Hongjun Wu;Feng Bao

  • Affiliations:
  • -;-

  • Venue:
  • ACISP '02 Proceedings of the 7th Australian Conference on Information Security and Privacy
  • Year:
  • 2002

Quantified Score

Hi-index 0.00

Visualization

Abstract

Filiol and Fontaine recently proposed a family of stream ciphers named COS. COS is based on nonlinear feedback shift registers and was claimed to be highly secure. Babbage showed that COS (2, 128) Mode II is extremely weak. But Babbage's attack is very expensive to break the COS (2, 128) Mode I (the complexity is around 252). In this paper, we show that the COS (2, 128) Mode I is very weak. Secret information could be recovered easily with about 216-bit known plaintext.