Differential Cryptanalysis Of T-Function Based Stream Cipher Tsc-4

Haina Zhangi,Xiaoyun Wang
DOI: https://doi.org/10.1007/978-3-540-76788-6_18
2007-01-01
Abstract:TSC-4 is a T-function based stream cipher with. 80-bit key, and proposed as a candidate for ECRYPT eStream project. In this paper, we introduce a differential method to analyze TSC-4. Our attack is based on the vulnerable differential characteristics in the state initialization of TSC-4, and for the chosen IV pairs, the differential probability is up to 2(-15.40) in the case of weak keys. We show that there are about 2(72) weak keys among the total 2(80) keys. To recover 8 bits of a weak key needs about 2(40.53) chosen IV pairs. After that, we can search the other 72 key bits by an exhaustive attack.
What problem does this paper attempt to address?