Atom: A Stream Cipher with Double Key Filter
It has been common knowledge that for a stream cipher to be secure against generic TMD tradeoff attacks, the size of its internal state in bits needs to be at least twice the size of the length of its secret key. In FSE 2015, Armknecht and Mikhalev however proposed the stream cipher Sprout with a Gr...
| Main Authors: | , , , , , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
Ruhr-Universität Bochum
2021-03-01
|
| Series: | IACR Transactions on Symmetric Cryptology |
| Subjects: | |
| Online Access: | https://tosc.iacr.org/index.php/ToSC/article/view/8832 |
| _version_ | 1828135105751678976 |
|---|---|
| author | Subhadeep Banik Andrea Caforio Takanori Isobe Fukang Liu Willi Meier Kosei Sakamoto Santanu Sarkar |
| author_facet | Subhadeep Banik Andrea Caforio Takanori Isobe Fukang Liu Willi Meier Kosei Sakamoto Santanu Sarkar |
| author_sort | Subhadeep Banik |
| collection | DOAJ |
| description | It has been common knowledge that for a stream cipher to be secure against generic TMD tradeoff attacks, the size of its internal state in bits needs to be at least twice the size of the length of its secret key. In FSE 2015, Armknecht and Mikhalev however proposed the stream cipher Sprout with a Grain-like architecture, whose internal state was equal in size with its secret key and yet resistant against TMD attacks. Although Sprout had other weaknesses, it germinated a sequence of stream cipher designs like Lizard and Plantlet with short internal states. Both these designs have had cryptanalytic results reported against them. In this paper, we propose the stream cipher Atom that has an internal state of 159 bits and offers a security of 128 bits. Atom uses two key filters simultaneously to thwart certain cryptanalytic attacks that have been recently reported against keystream generators. In addition, we found that our design is one of the smallest stream ciphers that offers this security level, and we prove in this paper that Atom resists all the attacks that have been proposed against stream ciphers so far in literature. On the face of it, Atom also builds on the basic structure of the Grain family of stream ciphers. However, we try to prove that by including the additional key filter in the architecture of Atom we can make it immune to all cryptanalytic advances proposed against stream ciphers in recent cryptographic literature. |
| first_indexed | 2024-04-11T17:43:29Z |
| format | Article |
| id | doaj.art-9e171b81cc5d421981869726919119a0 |
| institution | Directory Open Access Journal |
| issn | 2519-173X |
| language | English |
| last_indexed | 2024-04-11T17:43:29Z |
| publishDate | 2021-03-01 |
| publisher | Ruhr-Universität Bochum |
| record_format | Article |
| series | IACR Transactions on Symmetric Cryptology |
| spelling | doaj.art-9e171b81cc5d421981869726919119a02022-12-22T04:11:26ZengRuhr-Universität BochumIACR Transactions on Symmetric Cryptology2519-173X2021-03-012021110.46586/tosc.v2021.i1.5-36Atom: A Stream Cipher with Double Key FilterSubhadeep Banik0Andrea Caforio1Takanori Isobe2Fukang Liu3Willi Meier4Kosei Sakamoto5Santanu Sarkar6LASEC, École Polytechnique Fédérale de Lausanne, Lausanne, SwitzerlandLASEC, École Polytechnique Fédérale de Lausanne, Lausanne, SwitzerlandUniversity of Hyogo, Kobe, Japan; NICT, Tokyo, Japan; PRESTO, Japan Science and Technology Agency, Tokyo, JapanUniversity of Hyogo, Kobe, Japan; East China Normal University, Shanghai, ChinaUniversity of Applied Sciences and Arts Northwestern Switzerland, Windisch, SwitzerlandUniversity of Hyogo, Kobe, JapanIndian Institute of Technology, Madras, IndiaIt has been common knowledge that for a stream cipher to be secure against generic TMD tradeoff attacks, the size of its internal state in bits needs to be at least twice the size of the length of its secret key. In FSE 2015, Armknecht and Mikhalev however proposed the stream cipher Sprout with a Grain-like architecture, whose internal state was equal in size with its secret key and yet resistant against TMD attacks. Although Sprout had other weaknesses, it germinated a sequence of stream cipher designs like Lizard and Plantlet with short internal states. Both these designs have had cryptanalytic results reported against them. In this paper, we propose the stream cipher Atom that has an internal state of 159 bits and offers a security of 128 bits. Atom uses two key filters simultaneously to thwart certain cryptanalytic attacks that have been recently reported against keystream generators. In addition, we found that our design is one of the smallest stream ciphers that offers this security level, and we prove in this paper that Atom resists all the attacks that have been proposed against stream ciphers so far in literature. On the face of it, Atom also builds on the basic structure of the Grain family of stream ciphers. However, we try to prove that by including the additional key filter in the architecture of Atom we can make it immune to all cryptanalytic advances proposed against stream ciphers in recent cryptographic literature.https://tosc.iacr.org/index.php/ToSC/article/view/8832Short State Stream CipherLightweight CryptographyGrain family |
| spellingShingle | Subhadeep Banik Andrea Caforio Takanori Isobe Fukang Liu Willi Meier Kosei Sakamoto Santanu Sarkar Atom: A Stream Cipher with Double Key Filter IACR Transactions on Symmetric Cryptology Short State Stream Cipher Lightweight Cryptography Grain family |
| title | Atom: A Stream Cipher with Double Key Filter |
| title_full | Atom: A Stream Cipher with Double Key Filter |
| title_fullStr | Atom: A Stream Cipher with Double Key Filter |
| title_full_unstemmed | Atom: A Stream Cipher with Double Key Filter |
| title_short | Atom: A Stream Cipher with Double Key Filter |
| title_sort | atom a stream cipher with double key filter |
| topic | Short State Stream Cipher Lightweight Cryptography Grain family |
| url | https://tosc.iacr.org/index.php/ToSC/article/view/8832 |
| work_keys_str_mv | AT subhadeepbanik atomastreamcipherwithdoublekeyfilter AT andreacaforio atomastreamcipherwithdoublekeyfilter AT takanoriisobe atomastreamcipherwithdoublekeyfilter AT fukangliu atomastreamcipherwithdoublekeyfilter AT willimeier atomastreamcipherwithdoublekeyfilter AT koseisakamoto atomastreamcipherwithdoublekeyfilter AT santanusarkar atomastreamcipherwithdoublekeyfilter |