Towards cryptographic function distinguishers with evolutionary circuits

Investor logo

Warning

This publication doesn't include Faculty of Education. It includes Faculty of Informatics. Official publication website can be found on muni.cz.
Authors

ŠVENDA Petr UKROP Martin MATYÁŠ Václav

Year of publication 2013
Type Article in Proceedings
Conference Proceedings of SECRYPT 2013, 10th International Conference on Security and Cryptography
MU Faculty or unit

Faculty of Informatics

Citation
Web SeCrypt 2013 supplementary data
Field Informatics
Keywords eStream; genetic programming; random distinguisher; randomness statistical testing; software circuit
Description Cryptanalysis of a cryptographic function usually requires advanced cryptanalytical skills and extensive amount of human labour. However, some automation is possible, e.g., by using randomness testing suites like STS NIST or Dieharder. These can be applied to test statistical properties of cryptographic function outputs. Yet such testing suites are limited only to predefined patterns testing particular statistical defects. We propose more open approach based on a combination of software circuits and evolutionary algorithms to search for unwanted statistical properties like next bit predictability, random data non-distinguishability or strict avalanche criterion. Software circuit that acts as a testing function is automatically evolved by a stochastic optimization algorithm and uses information leaked during cryptographic function evaluation. We tested this general approach on problem of finding a distinguisher of outputs produced by several candidate algorithms for eStream competition from truly random sequences. We obtained similar results (with some exceptions) as those produced by STS NIST and Dieharder tests w.r.t. the number of rounds of the inspected algorithm. This paper focuses on providing solid assessment of the proposed approach w.r.t. STS NIST and Dieharder when applied over multiple different algorithms rather than obtaining best possible result for a particular one. Additionally, proposed approach is able to provide random distinguisher even when presented with very short sequence like 16 bytes only.
Related projects:

You are running an old browser version. We recommend updating your browser to its latest version.