Known-IV, Known-in-Advance-IV, and Replayed-and-Known-IV Attacks on Multiple Modes of Operation of Block Ciphers

Authors: Hong, Deukjo¹; Hong, Seokhie²; Lee, Wonil³; Lee, Sangjin⁴; Lim, Jongin⁵; Sung, Jaechul⁶; Yi, Okyeon⁷

Source: Journal of Cryptology, Volume 19, Number 4, October 2006 , pp. 441-462(22)

Publisher: Springer

Buy & download fulltext article:

Price: $47.00 plus tax (Refund Policy)

Abstract:

Normally, it has been believed that the initial values of cryptographic schemes do not need to be managed secretly unlike the secret keys. However, we show that multiple modes of operation of block ciphers can suffer a loss of security by the state of the initial values. We consider several attacks according to the environment of the initial values; known-IV attack, known-in-advance-IV attack, and replayed-and-known-IV attack. Our attacks on cascaded three-key triple modes of operation requires 3-7 blocks of plaintexts (or ciphertexts) and 3 · 2⁵⁶-9 · 2⁵⁶ encryptions. We also give the attacks on multiple modes proposed by Biham.

Document Type: Research article

DOI: http://dx.doi.org/10.1007/s00145-006-0205-3

Affiliations: 1: Email: hongdj@cist.korea.ac.kr 2: Email: hsh@cist.korea.ac.kr 3: Email: nice@cist.korea.ac.kr 4: Email: sangjin@cist.korea.ac.kr 5: Email: jilim@cist.korea.ac.kr 6: Email: jcsung@uos.ac.kr 7: Email: oyyi@kookmin.ac.kr