Fruit: ultra-lightweight stream cipher with shorter internal state
Fruit: ultra-lightweight stream cipher with shorter internal state
复制标题
DOI：
--
复制
发表时间：
2016
期刊：
影响因子：
--
通讯作者：
Vahid Aminghafari;Honggang Hu
中科院分区：
文献类型：
--
作者：
Vahid Aminghafari;Honggang Hu
在eSTREAM项目中，为硬件应用引入了一些轻量级流密码。在FSE 2015中，提出了一个新的想法（即通过使用秘密密钥来设计具有较短内部状态的流密码，不仅在初始化中，而且在密钥流生成中），同时提出了Sort。不幸的是，Sunday不安全。由于Grain-v1是eSTREAM项目组合中最轻量级的密码，因此我们引入Fruit-v2作为Grain-v1和Scrum的继任者。事实证明，Fruit-v2是安全和超轻量的。Fruit-v2中LFSR和NFSR的大小仅为80位（对于80位安全级别），而为了抵抗经典的时间-内存-数据权衡攻击，内部状态大小至少应为安全级别的两倍。为了满足这一规则并设计出一个具体的密码，我们采用了一些新的设计思想。讨论了Fruit-v2可以比Grain-v1更好地抵抗一些攻击，如经典的时间记忆-数据权衡。这项工作的主要目标是展示如何利用设计中的密钥来实现更小的区域尺寸。这是可能的重新设计许多流密码（通过新的想法），并实现显着更小的区域大小。
A few lightweight stream ciphers were introduced for hardware applications in the eSTREAM project. In FSE 2015, while presenting a new idea (i.e. the design of stream ciphers with the shorter internal state by using a secret key, not only in the initialization but also in the keystream generation), Sprout was proposed. Unfortunately, Sprout is insecure. Because Grain-v1 is the lightest cipher in the portfolio of the eSTREAM project, we introduce Fruit-v2 as a successor of the Grain-v1 and Sprout. It is demonstrated that Fruit-v2 is safe and ultra-lightweight. The size of LFSR and NFSR in Fruit-v2 is only 80 bits (for 80-bit security level), while for resistance to the classical time-memory-data trade-off attack, the internal state size should be at least twice of the security level. To satisfy this rule and to design a concrete cipher, we used some new design ideas. The discussions are presented that Fruit-v2 can be more resistant than Grain-v1 to some attacks such as classical timememory-data trade-off. The main objective of this work is to show how it is possible to exploit a secret key in a design to achieve smaller area size. It is possible to redesign many of stream ciphers (by the new idea) and achieve significantly smaller area size.