Tabu search against permutation based stream ciphers

Authors

  • Iwona Polak University of Silesia

Abstract

Encryption is one of the most effective methods of securing data confidentiality, whether stored on hard drives or transferred (e.g. by e-mail or phone call). In this paper a new state recovery attack with tabu search is introduced. Based on research and theoretical approximation it is shown that the internal state can be recovered after checking 2^52 internal states for RC4 and 2^180 for VMPC.

References

C. E. Shannon, “A mathematical theory of communication,” The Bell

System Technical Journal, vol. 27, no. 3, pp. 379–423, July 1948.

C. Shannon, Communication Theory and Secrecy Systems.

Bell Telephone Laboratories, 1949. [Online]. Available:

https://books.google.pl/books?id=8IL3HAAACAAJ

“RC4 Source Code,” Cypherpunks, September 1994,

http://cypherpunks.venona.com/archive/1994/09/msg00304.html.

B. Harris, “Improved Arcfour Modes for the Secure Shell (SSH)

Transport Layer Protocol,” January 2006. [Online]. Available:

http://tools.ietf.org/html/rfc4345

B. Zoltak, “VMPC One-Way Function and Stream Cipher,” in Fast

Software Encryption, ser. Lecture Notes in Computer Science, B. Roy

and W. Meier, Eds. Springer Berlin Heidelberg, 2004, vol. 3017,

pp. 210–225. [Online]. Available: http://dx.doi.org/10.1007/978-3-540-

-4 14

B. Ferriman and C. Obimbo, “Solving for the RC4 stream cipher state

register using a genetic algorithm,” International Journal of Advanced

Computer Science and Applications, vol. 5, no. 5, pp. 218–223, May

M. Vanhoef and F. Piessens, “All Your Biases Belong to Us: Breaking

RC4 in WPA-TKIP and TLS,” in Proceedings of the 24th USENIX

Conference on Security Symposium, ser. SEC’15. Berkeley, CA,

USA: USENIX Association, 2015, pp. 97–112. [Online]. Available:

http://dl.acm.org/citation.cfm?id=2831143.2831150

A. Maximov, Two Linear Distinguishing Attacks on VMPC and RC4A

and Weakness of RC4 Family of Stream Ciphers. Berlin, Heidelberg:

Springer Berlin Heidelberg, 2005, pp. 342–358. [Online]. Available:

https://doi.org/10.1007/11502760 23

S. Li, Y. Hu, Y. Zhao, and Y. Wang, “Improved cryptanalysis of the

VMPC stream cipher,” Journal of Computational Information Systems,

vol. 8, no. 2, pp. 831–838, 2012.

S. Sarkar, “Further non-randomness in RC4, RC4A and VMPC,”

Cryptography and Communications, vol. 7, no. 3, pp. 317–330, 2015.

[Online]. Available: https://doi.org/10.1007/s12095-014-0119-0

Y. Tsunoo, T. Saito, H. Kubo, M. Shigeri, T. Suzaki, and T. Kawabata,

“The Most Efficient Distinguishing Attack on VMPC and RC4A.”

F. Glover, “Future Paths for Integer Programming and Links to

Artificial Intelligence,” Comput. Oper. Res., vol. 13, no. 5, pp. 533–

, May 1986. [Online]. Available: http://dx.doi.org/10.1016/0305-

(86)90048-1

F. Glover and M. Laguna, Tabu Search. Norwell, MA, USA: Kluwer

Academic Publishers, 1997.

S. Maitra and G. Paul, Analysis of RC4 and Proposal of

Additional Layers for Better Security Margin. Berlin, Heidelberg:

Springer Berlin Heidelberg, 2008, pp. 27–39. [Online]. Available:

http://dx.doi.org/10.1007/978-3-540-89754-5 3

R. L. Rivest and J. C. N. Schuldt, “Spritz—a spongy RC4-like stream

cipher and hash function,” August 19, 2014, presented at Charles River

Crypto Day (2014-10-24).

S. Paul and B. Preneel, A New Weakness in the RC4 Keystream

Generator and an Approach to Improve the Security of the Cipher.

Berlin, Heidelberg: Springer Berlin Heidelberg, 2004, pp. 245–259.

[Online]. Available: https://doi.org/10.1007/978-3-540-25937-4 16

J. Strombergson and S. Josefsson, “Test Vectors for the Stream Cipher

RC4,” May 2011. [Online]. Available: http://tools.ietf.org/html/rfc6229

Downloads

Published

2018-04-27

Issue

Vol. 64 No. 2 (2018)

Section

Cryptography and Cybersecurity

License

Copyright (c) 2018 International Journal of Electronics and Telecommunications

Creative Commons License

This work is licensed under a Creative Commons Attribution-NonCommercial 4.0 International License.

1. License

The non-commercial use of the article will be governed by the Creative Commons Attribution license as currently displayed on https://creativecommons.org/licenses/by/4.0/.

2. Author’s Warranties

The author warrants that the article is original, written by stated author/s, has not been published before, contains no unlawful statements, does not infringe the rights of others, is subject to copyright that is vested exclusively in the author and free of any third party rights, and that any necessary written permissions to quote from other sources have been obtained by the author/s. The undersigned also warrants that the manuscript (or its essential substance) has not been published other than as an abstract or doctorate thesis and has not been submitted for consideration elsewhere, for print, electronic or digital publication.

3. User Rights

Under the Creative Commons Attribution license, the author(s) and users are free to share (copy, distribute and transmit the contribution) under the following conditions: 1. they must attribute the contribution in the manner specified by the author or licensor, 2. they may alter, transform, or build upon this work, 3. they may use this contribution for commercial purposes.

4. Rights of Authors

Authors retain the following rights:

- copyright, and other proprietary rights relating to the article, such as patent rights,

- the right to use the substance of the article in own future works, including lectures and books,

- the right to reproduce the article for own purposes, provided the copies are not offered for sale,

- the right to self-archive the article

- the right to supervision over the integrity of the content of the work and its fair use.

5. Co-Authorship

If the article was prepared jointly with other authors, the signatory of this form warrants that he/she has been authorized by all co-authors to sign this agreement on their behalf, and agrees to inform his/her co-authors of the terms of this agreement.

6. Termination

This agreement can be terminated by the author or the Journal Owner upon two months’ notice where the other party has materially breached this agreement and failed to remedy such breach within a month of being given the terminating party’s notice requesting such breach to be remedied. No breach or violation of this agreement will cause this agreement or any license granted in it to terminate automatically or affect the definition of the Journal Owner. The author and the Journal Owner may agree to terminate this agreement at any time. This agreement or any license granted in it cannot be terminated otherwise than in accordance with this section 6. This License shall remain in effect throughout the term of copyright in the Work and may not be revoked without the express written consent of both parties.

7. Royalties

This agreement entitles the author to no royalties or other fees. To such extent as legally permissible, the author waives his or her right to collect royalties relative to the article in respect of any use of the article by the Journal Owner or its sublicensee.

8. Miscellaneous

The Journal Owner will publish the article (or have it published) in the Journal if the article’s editorial process is successfully completed and the Journal Owner or its sublicensee has become obligated to have the article published. Where such obligation depends on the payment of a fee, it shall not be deemed to exist until such time as that fee is paid. The Journal Owner may conform the article to a style of punctuation, spelling, capitalization and usage that it deems appropriate. The Journal Owner will be allowed to sublicense the rights that are licensed to it under this agreement. This agreement will be governed by the laws of Poland.

By signing this License, Author(s) warrant(s) that they have the full power to enter into this agreement. This License shall remain in effect throughout the term of copyright in the Work and may not be revoked without the express written consent of both parties.