Abstract:Algebraic Fault Analysis (AFA) is a cryptanalysis for block ciphers proposed by Courtois et al., which incorporates algebraic cryptanalysis to overcome the complexity of manual analysis within the context of Differential Fault Analysis (DFA). The effectiveness of AFA on lightweight block ciphers has been demonstrated. However, the complexity of the algebraic systems prevents it from attacking heavyweight block ciphers efficiently. In this paper, we propose a novel cryptanalysis called Redundancies-assisted Algebraic Fault Analysis (RAFA) to facilitate the solution of algebraic systems in the setting of heavyweight block ciphers. The core idea of RAFA is to expedite SAT solvers by modifying the algebraic systems, which is accomplished via two methods. The first method introduces redundant constraints, which is proposed for the first time in the context of algebraic cryptanalysis. The second one is a sophisticated linearization of the nonlinear Algebraic Normal Form (ANF). It takes RAFA for about 9.68 hours to attack AES-128. To the best of our knowledge, this is the first work that uses a general SAT solver to attack AES with only a single injection of byte-fault. Moreover, RAFA can attack AES-128 in 50.92 and 27.54 minutes for nibble- and bit-based fault model, respectively. In comparison, the traditional DFA algorithm implemented by pure C takes 4 ~ 5 hours under all three fault models investigated in this work. Moreover, in order to show the generality of RAFA, we also apply it to other heavyweight block ciphers. The best results show that RAFA could recover the key of Serpent-256 and SPEEDY-r-192 in 20.7 and 1.5 hours using only three faults, respectively. In comparison, AFA could not break these two ciphers even when 30 bits and 50 bits of their keys are known, respectively. Furthermore, no DFA work on Serpent or SPEEDY is known using comparable fault models.

Improved Differential Fault Analysis Of Sosemanuk With Algebraic Techniques

Fault-based guess-and-determine attack on SOSEMANUK

Improving and Evaluating Differential Fault Analysis on LED with Algebraic Techniques

Improved algebraic fault analysis: a case study on piccolo and applications to other lightweight block ciphers

Improved Differential Fault Analysis on LED with Constraint Equations: Towards Reaching Its Limit

Theoretical Round Modification Fault Analysis on AEGIS-128 with Algebraic Techniques

Improved Fault Analysis on Subterranean 2.0

The Improved Algorithm Regarding Differential Fault Analysis against AES

An Automated Framework for Analysis and Evaluation of Algebraic Fault Attacks on Lightweight Block Ciphers

Algebraic Fault Analysis on GOST for Key Recovery and Reverse Engineering

An Effective Differential Fault Analysis on the Serpent Cryptosystem in the Internet of Things

A Framework for the Analysis and Evaluation of Algebraic Fault Attacks on Lightweight Block Ciphers

Fault-cube attack on SIMON family of lightweight block ciphers

Double Laser-Faults Based PFA on Cryptographic Circuits with Algebraic Analysis

Fiddling the Twiddle Constants - Fault Injection Analysis of the Number Theoretic Transform.

Improvement and Evaluation for Algebraic Fault Attacks on PRESENT

A Comprehensive Study of Algebraic Fault Analysis on PRINCE

RAFA: Redundancies-assisted Algebraic Fault Analysis and its implementation on SPN block ciphers.

Low-cost Design of Stealthy Hardware Trojan for Bit-Level Fault Attacks on Block Ciphers

Optimization Methods for the Fault Injection Tool SEInjector

Comment on "Impossible Differential Fault Analysis on the LED Lightweight Cryptosystem in the Vehicular Ad-Hoc Networks"