Abstract:For Arithmetization-Oriented ciphers and hash functions Gröbner basis attacks are generally considered as the most competitive attack vector. Unfortunately, the complexity of Gröbner basis algorithms is only understood for special cases, and it is needless to say that these cases do not apply to most cryptographic polynomial systems. Therefore, cryptographers have to resort to experiments, extrapolations and hypotheses to assess the security of their designs. One established measure to quantify the complexity of linear algebra-based Gröbner basis algorithms is the so-called solving degree. Caminata \& Gorla revealed that under a certain genericity condition on a polynomial system the solving degree is always upper bounded by the Castelnuovo-Mumford regularity and henceforth by the Macaulay bound, which only takes the degrees and number of variables of the input polynomials into account. In this paper we extend their framework to iterated polynomial systems, the standard polynomial model for symmetric ciphers and hash functions. In particular, we prove solving degree bounds for various attacks on MiMC, Feistel-MiMC, Feistel-MiMC-Hash, Hades and GMiMC. Our bounds fall in line with the hypothesized complexity of Gröbner basis attacks on these designs, and to the best of our knowledge this is the first time that a mathematical proof for these complexities is provided. Moreover, by studying polynomials with degree falls we can prove lower bounds on the Castelnuovo-Mumford regularity for attacks on MiMC, Feistel-MiMC and Feistel-MiMC-Hash provided that only a few solutions of the corresponding iterated polynomial system originate from the base field. Hence, regularity-based solving degree estimations can never surpass a certain threshold, a desirable property for cryptographic polynomial systems.

Invariant Hopping Attacks on Block Ciphers

Constructive Non-Linear Polynomial Cryptanalysis of a Historical Block Cipher

Persistence Wears down Resistance: Persistent Fault Analysis on Unprotected and Protected Block Cipher Implementations (Extended Abstract)

Algebraic, Aida/Cube And Side Channel Analysis Of Katan Family Of Block Ciphers

Stealthy Hardware Trojan Based Algebraic Fault Analysis of HIGHT Block Cipher.

Linear (Hull) And Algebraic Cryptanalysis Of The Block Cipher Present

The Key-Dependent Attack on Block Ciphers

A Framework for the Analysis and Evaluation of Algebraic Fault Attacks on Lightweight Block Ciphers

Low-cost Design of Stealthy Hardware Trojan for Bit-Level Fault Attacks on Block Ciphers

Further Analysis of Block Ciphers Against Timing Attacks

Impossibility of Indifferentiable Iterated Blockciphers from 3 or Less Primitive Calls.

Stream/block ciphers, difference equations and algebraic attacks

Algebraic Side-Channel Attacks on KLEIN

Differential Invariant Subspace Cryptanalysis – A Realtime Attack against IoT-friendly Word-based Block Ciphers

Solving Degree Bounds For Iterated Polynomial Systems

Binary bi-braces and applications to cryptography

Hash Functions Based on Block Ciphers

Quantum Differential and Linear Cryptanalysis

Security of iterated hash functions based on block ciphers

A related-key attack on iterated chaotic ciphers

Interpolation Attacks on Round-Reduced Elephant, Kravatte and Xoofff