Abstract:Algebraic Fault Analysis (AFA) is a cryptanalysis for block ciphers proposed by Courtois et al., which incorporates algebraic cryptanalysis to overcome the complexity of manual analysis within the context of Differential Fault Analysis (DFA). The effectiveness of AFA on lightweight block ciphers has been demonstrated. However, the complexity of the algebraic systems prevents it from attacking heavyweight block ciphers efficiently. In this paper, we propose a novel cryptanalysis called Redundancies-assisted Algebraic Fault Analysis (RAFA) to facilitate the solution of algebraic systems in the setting of heavyweight block ciphers. The core idea of RAFA is to expedite SAT solvers by modifying the algebraic systems, which is accomplished via two methods. The first method introduces redundant constraints, which is proposed for the first time in the context of algebraic cryptanalysis. The second one is a sophisticated linearization of the nonlinear Algebraic Normal Form (ANF). It takes RAFA for about 9.68 hours to attack AES-128. To the best of our knowledge, this is the first work that uses a general SAT solver to attack AES with only a single injection of byte-fault. Moreover, RAFA can attack AES-128 in 50.92 and 27.54 minutes for nibble- and bit-based fault model, respectively. In comparison, the traditional DFA algorithm implemented by pure C takes 4 ~ 5 hours under all three fault models investigated in this work. Moreover, in order to show the generality of RAFA, we also apply it to other heavyweight block ciphers. The best results show that RAFA could recover the key of Serpent-256 and SPEEDY-r-192 in 20.7 and 1.5 hours using only three faults, respectively. In comparison, AFA could not break these two ciphers even when 30 bits and 50 bits of their keys are known, respectively. Furthermore, no DFA work on Serpent or SPEEDY is known using comparable fault models.

Specific Authenticated Encryption Algorithm Based on SM4 under Framework of Stream Cipher

High-Speed Implementation of the SMS4 Algorithm Engine

Construction and security analysis of hash algorithm based on stream cipher

Fast Implementation for SM4 Cipher Algorithm Based on Bit-Slice Technology

A novel SM4 cryptographic architecture against higher order power analysis attacks

RCCA-secure Public-Key Encryption Based on SM2

A Lightweight Countermeasure of SM4 against Side Channel Analysis

Optimized SM4 Hardware Implementations for Low Area Consumption

High-Security Stream-Cipher Generation Employing Synchronized Random Bit Generation and RC4 Algorithm

Enhanced Differential Cache Attacks on SM4 with Algebraic Analysis and Error-Tolerance

A Fast Adaptive Stream Cipher Algorithm and Expanded Search.

Design and Implementation of SM4 Block Cipher Based on Composite Field

RAFA: Redundancies-assisted Algebraic Fault Analysis and its implementation on SPN block ciphers.

A Lightweight and Efficient Secure Hybrid RSA (SHRSA) Messaging Scheme with Four-Layered Authentication Stack

A New Adaptive SSC and SSSC Stream Cipher Model Design and Implementation

Hardware Implementation of SM4 Based on Composite Filed S-box and It's Security against Machine Learning Attack

Improvements of SM4 Algorithm and Application in Ethernet Encryption System Based on FPGA.

A Chosen-Plaintext Method of CPA on SM4 Block Cipher

Optimized Implementation of SM4 on AVR Microcontrollers, RISC-V Processors, and ARM Processors

SM2 cryptographic algorithm based on discrete logarithm problem and prospect

Unified Lossless-Throughput Architecture for AES and SM4 Encryption with Changeable Keys