Abstract:ZUC-256 is a stream cipher designed for 5G applications by the ZUC team. Together with AES-256 and SNOW-V, it is currently being under evaluation for standardized algorithms in 5G mobile telecommunications by Security Algorithms Group of Experts (SAGE). A notable feature of the round update function of ZUC-256 is that many operations are defined over different fields, which significantly increases the difficulty to analyze the algorithm.As a main contribution, with the tools of the modular difference, signed difference and XOR difference, we develop new techniques to carefully control the interactions between these operations defined over different fields. At first glance, our techniques are somewhat similar to those developed by Wang et al. for the MD-SHA hash family. However, as ZUC-256 is quite different from the MD-SHA hash family and its round function is much more complex, we are indeed dealing with different problems and overcoming new obstacles.As main results, by utilizing complex input differences, we can present the first distinguishing attacks on 31 out of 33 rounds of ZUC-256 and 30 out of 33 rounds of the new version of ZUC-256 called ZUC-256-v2 with low time and data complexities, respectively. These attacks target the initialization phase and work in the related-key model with weak keys. Moreover, with a novel IV-correcting technique, we show how to efficiently recover at least 16 key bits for 15-round ZUC-256 and 14-round ZUC-256-v2 in the related-key setting, respectively. It is unpredictable whether our attacks can be further extended to more rounds with more advanced techniques. Based on the current attacks, we believe that the full 33 initialization rounds provide marginal security.

New Cryptanalysis of ZUC-256 Initialization Using Modular Differences

Finding Practical Distinguishers for ZUC-256 Using Modular Differences.

A Hardware Implementation of ZUC-256 Stream Cipher

Theoretical Round Modification Fault Analysis on AEGIS-128 with Algebraic Techniques

Improved Cryptanalysis of the Block Cipher KASUMI

Algebraic, Aida/Cube And Side Channel Analysis Of Katan Family Of Block Ciphers

New Impossible Differential Cryptanalysis of Zodiac

Explicit Upper Bound Of Impossible Differentials For AES-Like Ciphers: Application To uBlock And Midori

Adaptive Side-Channel Analysis Model and Its Applications to White-Box Block Cipher Implementations.

Unified Impossible Differential Cryptanalysis on Block Cipher Structures

A High-throughput Hardware Implementation of ZUC-256 Stream Cipher

Cryptanalysis Of Midori128 Using Impossible Differential Techniques

Security Cryptanalysis of NUX for the Internet of Things

Improvements for Finding Impossible Differentials of Block Cipher Structures

UC-Secure Cryptographic Reverse Firewall-Guarding Corrupted Systems with the Minimum Trusted Module.

Zero-Value Point Attacks on Kummer-Based Cryptosystem.

Improved Conditional Differential Attacks on Lightweight Hash Family QUARK

Practical attack on the full MMB block cipher

Conditional Differential Cryptanalysis on Bagua

Cube Cryptanalysis Of Round-Reduced Acorn

Another View on Cube Attack , Cube Tester , AIDA and Higher Order Differential Cryptanalysis