Introduction New distinguisher for SIMD Security proof with distinguishers Analysis of differential paths

Charles Bouillaguet, Pierre-Alain Fouque, Gaëtan Leurent

Description

Introduction New distinguisher for SIMD Security proof with distinguishers Analysis of differential paths Security Analysis of SIMD Charles Bouillaguet, Pierre-Alain Fouque, Gaëtan Leurent École Normale Supérieure Paris, France SAC 2010 – University of Waterloo G. Leurent (ENS) Security Analysis of SIMD SAC 2010 1 / 29

• no structural


• message expansion


• simd sac


• davies-meyer compression


• nist sha


• valid submissions


• ecole normale

Sujets

• Fouqué
• École normale

Informations

• Publié par: pefav
• Nombre de lectures: 10
• Langue: English

Extrait

IntroductionNewidtsniugsiehfrroMDSIcuSetyriooprtiwfsidhgnithsiunalyersAfdifsisotnaiefershplta E(tnerueL.GlynayAiturec)SNS92/1

École Normale Supérieure Paris, France

Charles Bouillaguet, Pierre-Alain Fouque,Gaëtan Leurent

Security Analysis ofSIMD

SAC 2010 – University of Waterloo

sosiIMfSACDS1020

alAntyriSIofisys102CASDM

I A public function with no structural properties. I Cryptographic strength without keys!

Hash functions

92/20G.ne(teLrueSucNE)S

0x1d66ca77ab361c6f

I F:{0,1} ∗ → {0,1} n

F

nIrtdocuitnoSDMISrofpytirucetiiswdNeershuingsrnAsiehsifolasywithroofingudistslaithtapffidnere

SDMISrofrehsiugnthwiofroypiturecnIrtistiNewdtionoducslaithtapsiehsrnAidtsniugdifferenalysisof NE)SeSucirytnAlaG.Leurent(

F

0x1d66ca77ab361c6f

I F:{0,1} ∗ → {0,1} n

Hash functions

I Apublicfunction withno structural properties. I Cryptographic strength without keys!

9/202102CASDMISfosisy

spathtialerensherforSistinguitipyorfoMISDceruguinheisthwistdifosiffidnAsrsyla

I Similar to the AES competition I Organized by NIST

I 14 in the second round (July 2009) I 5 finalists in September 2010? I Winner in 2012?

I Submission dead-line was October 2008: 64 candidiates I 51 valid submissions

The SHA-3 competition

29tnerSNE(GueL.CA0201/3osSfMISDyAnalysi)Securit tionNewdIntroduc