Rotational analysis of ChaCha permutation

DOI10.3934/AMC.2021057MaRDI QIDQ6047438zbMATH OpenOpenAlexFDO

Authors Stefano Barbero, Emanuele Bellini, Rusydi H. Makarim

Publication date 12 September 2023

Published in Advances in Mathematics of Communications (Search for Journal in Brave)

Full work available at URL https://arxiv.org/abs/2008.13406

zbMATH Keywords

ChaCha20distinguisherpermutationrotational cryptanalysisstream cipher

Mathematics Subject Classification ID

Permutations, words, matrices (05A05) Algebraic coding theory; cryptography (number-theoretic aspects) (11T71) Combinatorics in computer science (68R05) Cryptography (94A60)

Abstract: We show that the underlying permutation of ChaCha20 stream cipher does not behave as a random permutation for up to 17 rounds with respect to rotational cryptanalysis. In particular, we derive a lower and an upper bound for the rotational probability through ChaCha quarter round, we show how to extend the bound to a full round and then to the full permutation. The obtained bounds show that the probability to find what we call a parallel rotational collision is, for example, less than $2^{-488}$ for 17 rounds of ChaCha permutation, while for a random permutation of the same input size, this probability is $2^{-511}$. We remark that our distinguisher is not an attack to ChaCha20 stream cipher, but rather a theoretical analysis of its internal permutation from the point of view of rotational cryptanalysis.

Recommendations

• Rotational Cryptanalysis of Salsa Core Function
• Rotational cryptanalysis of ARX revisited
• Chosen IV cryptanalysis on reduced round \texttt{ChaCha} and \texttt{Salsa}
• Rotational-linear attack: a new framework of cryptanalysis on ARX ciphers with applications to Chaskey
• Improved analysis for reduced round Salsa and ChaCha

Cites work

• BLAKE2: simpler, smaller, fast as MD5
• Can a differential attack work for an arbitrarily large number of rounds?
• Cryptanalysis of hash functions on the MD4-family.
• scientific article; zbMATH DE number 1774199 (Why is no real title available?)
• Markov Ciphers and Differential Cryptanalysis
• On the Salsa20 Core Function
• Rotational cryptanalysis of ARX revisited
• SPHINCS: practical stateless hash-based signatures

Cited in

(4)

• Bricklayer attack: a side-channel analysis on the ChaCha quarter round
• Rotational cryptanalysis on MAC algorithm chaskey
• An observation on NORX, BLAKE2, and ChaCha
• Rotational Cryptanalysis of Salsa Core Function

This page was built for publication: Rotational analysis of ChaCha permutation

Report a bug (only for logged in users!)Click here to report a bug for this page (MaRDI item Q6047438)