A Practical Attack on Broadcast RC4

  • Authors:
  • Itsik Mantin;Adi Shamir

  • Affiliations:
  • -;-

  • Venue:
  • FSE '01 Revised Papers from the 8th International Workshop on Fast Software Encryption
  • Year:
  • 2001

Quantified Score

Hi-index 0.00

Visualization

Abstract

RC4 is the most widely deployed stream cipher in software applications. In this paper we describe a major statistical weakness in RC4, which makes it trivial to distinguish between short outputs of RC4 and random strings by analyzing their second bytes. This weakness can be used to mount a practical ciphertext-only attack on RC4 in some broadcast applications, in which the same plaintext is sent to multiple recipients under different keys.