Cryptanalysis Based on 2-Adic Rational Approximation
Cryptanalysis Based on 2-Adic Rational Approximation
复制标题
DOI：
10.1007/3-540-44750-4_21
复制
发表时间：
1995-08
期刊：
影响因子：
--
通讯作者：
A. Klapper;M. Goresky
中科院分区：
文献类型：
--
作者：
A. Klapper;M. Goresky
本文提出了一种新的序列密码分析攻击算法。有一个相关的安全度量，2-adic跨度。为了使流密码安全，它的2-adic跨度必须很大。这种攻击暴露了Rueppel和Massey求和合并器的一个弱点。该算法基于De Weger和Mahler的2-adic数的有理逼近理论，利用进位移位寄存器合成一个最短的反馈，输出一个特定的密钥流，给定密钥流的少量比特。它是自适应的，因为它不需要事先知道可用比特的数量。
This paper presents a new algorithm for cryptanalytically attacking stream ciphers. There is an associated measure of security, the2-adic span. In order for a stream cipher to be secure, its 2-adic span must be large. This attack exposes a weakness of Rueppel and Massey’s summation combiner. The algorithm, based on De Weger and Mahler’s rational approximation theory for 2-adic numbers, synthesizes a shortestfeedback with carry shift registerthat outputs a particular key stream, given a small number of bits of the key stream. It is adaptive in that it does not need to know the number of available bits beforehand.