Bit Independence Criterion Extended to Stream Ciphers
Source abstract
Abstract
The bit independence criterion was proposed to evaluate the security of the S-boxes used in block ciphers. This paper proposes an algorithm that extends this criterion to evaluate the degree of independence between the bits of inputs and outputs of the stream ciphers. The effectiveness of the algorithm is experimentally confirmed in two scenarios: random outputs independent of the input, in which it does not detect dependence, and in the RC4 ciphers, where it detects significant dependencies related to some known weaknesses. The complexity of the algorithm is estimated based on the number of inputs l, and the dimensions, n and m, of the inputs and outputs, respectively.
Source: crossref · Quality: baseline
Research context
OpenAlex topics: Cryptographic Implementations and Security · Coding theory and cryptography · Chaos-based Image/Signal Encryption
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
Affiliations
Institute of Cryptography, University of Havana, Havana 10400, Cuba
Facultad de Ciencias Económicas y Empresariales, Universidad Panamericana, Álvaro del Portillo 49, Zapopan, Jalisco 45010, Mexico
Faculty of Informatics, Technological University of Havana (UTH), CUJAE, Havana 19390, Cuba
References (49)
Show source-provided references
1. Randomness in digital cryptography: A survey
2. Statistical Testing of Cryptographic Randomness
3. (2020, July 05). ECRYPT Stream Cipher Project. Available online: http://cr.yp.to/streamciphers.html.
4. Performance and statistical analysis of stream ciphers in GSM communications10.24138/jcomss.v16i1.892 ↗
5. Gorbenko, I., Kuznetsov, A., Lutsenko, M., and Ivanenko, D. (2017, January 10–13). The research of modern stream ciphers. Proceedings of the 2017 4th International Scientific-Practical Conference Problems of Infocommunications. Science and Technology (PIC S&T), Kharkov, Ukraine.10.1109/INFOCOMMST.2017.8246381 ↗
6. Randomness evaluation of ZUC, SNOW and GRAIN stream ciphers10.1007/978-981-10-2750-5_6 ↗
7. Rukhin, A., Soto, J., and Nechvatal, J. (2010). A Statistical Test Suite for Random and Pseudorandom Number Generators for Cryptographic Applications, Booz-Allen and Hamilton Inc.. Technical Report April.
8. Marsaglia, G. (2020, July 05). The Marsaglia Random Number CDROM Including the Diehard Battery of Tests of Randomness. Available online: http://stat.fsu.edu/pub/diehard/.
9. L’ecuyer, P., and Simard, R. (2007). TestU01: A C library for empirical testing of random number generators. ACM Trans. Math. Softw. TOMS, 33.10.1145/1268776.1268777 ↗
10. McClellan, M.T., Minker, J., and Knuth, D.E. (1974). The Art of Computer Programming, Vol. 3: Sorting and Searching, Addison-Wesley Professional.10.2307/2005383 ↗
11. Improved key recovery attacks on reduced-round Salsa20 and ChaCha10.1007/978-3-642-37682-5_24 ↗
12. New form of permutation bias and secret key leakage in keystream bytes of RC410.1007/978-3-540-71039-4_16 ↗
13. On the Design of Time
14. S-box on subgroup of Galois field based on linear fractional transformation10.1049/el.2017.0194 ↗
15. Naseer, Y., Shah, T., Shah, D., and Hussain, S. (2019). A Novel Algorithm of Constructing Highly Nonlinear S-p-boxes. Cryptography, 3.10.3390/cryptography3010006 ↗
16. Turan, M.S. (2008). On Statistical Analysis of Synchronous Stream Ciphers. arXiv.
17. Randomness Evaluation Framework of Cryptographic Algorithms
18. The strict avalanche criterion randomness test10.1016/j.matcom.2004.09.001 ↗
19. Mishra, P.R., Gupta, I., and Pillai, N.R. (2011, January 19–22). Generalized avalanche test for stream cipher analysis. Proceedings of the International Conference on Security Aspects in Information Technology, Haldia, India.10.1007/978-3-642-24586-2_15 ↗
20. Measuring diffusion in stream ciphers using statistical testing methods10.14429/dsj.62.1435 ↗
21. Sosa-Gómez, G., Rojas, O., and Páez-Osuna, O. (2020). Using hadamard transform for cryptanalysis of pseudo-random generators in stream ciphers. EAI Endorsed Trans. Energy Web, 7.
22. Madarro Capó, E.J., Cuellar, O.J., Legón Pérez, C.M., and Gómez, G.S. (2016, January 12–14). Evaluation of input—Output statistical dependence PRNGs by SAC. Proceedings of the 2016 International Conference on Software Process Improvement (CIMPS), Aguascalientes, Mexico.10.1109/CIMPS.2016.7802810 ↗
23. Paul, G., and Maitra, S. (2011). RC4: Stream cipher and its variants. RC4 Stream Cipher Its Var., 1–281.10.1201/b11310 ↗
24. Grosul, A.L., and Wallach, D.S. (2000). A Related-Key Cryptanalysis of RC4, Rice University.
25. Key collisions of the RC4 stream cipher10.1007/978-3-642-03317-9_3 ↗
26. How to find short RC4 colliding key pairs10.1007/978-3-642-24861-0_3 ↗
27. Maitra, S., Paul, G., Sarkar, S., Lehmann, M., and Meier, W. (2013). New Results on Generalization of Roos-Type Biases and Related Keystreams of RC4. International Conference on Cryptology in Africa, Springer.10.1007/978-3-642-38553-7_13 ↗
28. Maximov, A. (2006). Some Words on Cryptanalysis of Stream Ciphers, Citeseer.
29. Avalanche and bit independence properties for the ensembles of randomly chosen n × n s-boxes
30. Karell-Albo, J.A., Legón-Pérez, C.M., Madarro-Capó, E.J., Rojas, O., and Sosa-Gómez, G. (2020). Measuring independence between statistical randomness tests by mutual information. Entropy, 22.10.3390/e22070741 ↗
31. Performance Evaluation of Stream Ciphers for Efficient and Quick Security of Satellite Images10.18178/ijsps.7.3.96-102 ↗
32. Studies on statistical analysis and performance evaluation for some stream ciphers10.47839/ijc.18.1.1277 ↗
33. (2020, July 05). RC4 Cipher Is No Longer Supported in Internet Explorer 11 or Microsoft Edge. Available online: https://support.microsoft.com/en-us/help/3151631/rc4-cipher-is-no-longer-supported-in-internet-explorer-11-or-microsoft.
34. (2020, July 05). SSL Configuration Required to Secure Oracle HTTP Server after Applying Security Patch Updates. Available online: https://support.oracle.com/knowledge/Middleware/2314658_1.html.
35. A Comprehensive Survey on SSL/ TLS and Their Vulnerabilities
36. Performance analysis of security algorithms10.1007/978-981-15-3992-3_39 ↗
37. Modified RC4 variants and their performance analysis10.1007/978-981-13-1906-8_38 ↗
38. Information hiding in edges: A high capacity information hiding technique using hybrid edge detection10.1007/s11042-016-4253-x ↗
39. Effective data storage security with efficient computing in cloud
40. Secure portable storage drive: Secure information storage
41. Nita, S., Mihailescu, M., and Pau, V. (2018). Security and Cryptographic Challenges for Authentication Based on Biometrics Data. Cryptography, 2.10.20944/preprints201810.0618.v1 ↗
42. Possible Modifications of RC4 Stream Cipher10.1007/978-3-030-33491-8_40 ↗
43. Optimization of the Security-Performance Tradeoff in RC4 Encryption Algorithm10.1007/s11277-016-3603-3 ↗
44. Verdú, S. (2019). Empirical estimation of information measures: A literature guide. Entropy, 21.10.3390/e21080720 ↗
45. Hutson, A.D. (2019). A robust Pearson correlation test for a general point null using a surrogate bootstrap distribution. PLoS ONE, 14.10.1371/journal.pone.0216287 ↗
46. Probabilistic analysis methods of S-boxes and their applications
47. Walpole, R.E., and Myers, R.H. (2012). Probability & Statistics for Engineers & Scientists, Pearson Education Limited.
48. A Comparison among Twenty-Seven Normality Tests
49. Evaluation of the RC4 algorithm as a solution for converged networks