A Practical Cryptanalysis of SSC2

  • Authors:
  • Philip Hawkes;Frank Quick;Gregory G. Rose

  • Affiliations:
  • -;-;-

  • Venue:
  • SAC '01 Revised Papers from the 8th Annual International Workshop on Selected Areas in Cryptography
  • Year:
  • 2001

Quantified Score

Hi-index 0.00

Visualization

Abstract

SSC2 is a stream cipher that operates by XORing the output of two "half-ciphers". The first half-cipher is constructed from a linear feedback shift register (LFSR) with a non-linear filter. The second halfcipher is constructed from a lagged Fibonacci generator (LFG) and a multiplexor that chooses values from the Fibonacci register. The second half-cipher has a small cycle length π ≅ 252. The initial state of the LFSR is derived by performing a fast correlation attack on the sequence resulting when XORing the key-stream at an interval of π words (thus cancelling the effect of the LFG). This attack requires around 252 words of this sequence and a few hours of computation. The initial state of the LFG is then derived from around 15300 outputs using around one second of computation.