Root finding interpolation attack

From MaRDI portal





In this paper, we first show that there are \textit{several equivalent} keys for \(t+1\) chosen plaintexts if the degree of the reduced cipher is \(t-1\). This is against the claim by Jakobsen and Knudsen. We also derive an upper bound on the number of equivalent last round keys for \(t+1\) chosen plaintexts. We further show an efficient method which finds all the equivalent keys by using Rabin's root finding algorithm. We call our attack \textit{root finding interpolation attack}. For the entire collection see [Zbl 0961.00038].












This page was built for publication: Root finding interpolation attack

Report a bug (only for logged in users!)Click here to report a bug for this page (MaRDI item Q2762763)