A resynchronization attack is proposed on stream ciphers filtered by Maiorana-McFarland （M-M） functions and equipped with a linear resynchronization mechanism. The proposed attack utilizes the linear weakness of the...A resynchronization attack is proposed on stream ciphers filtered by Maiorana-McFarland （M-M） functions and equipped with a linear resynchronization mechanism. The proposed attack utilizes the linear weakness of the resynchronization mechanism, the partial linearity of M-M functions, and applies the linear consistency test method to recover the secret key. It is shown that an M-M function should not be implemented by itself but rather in combination with other nonlinear components in stream ciphers using linear mechanisms to prevent the proposed attack. It is also shown that the use of linear resynchronization mechanisms should be avoided despite their high efficiency in stream ciphers filtered by M-M functions.展开更多
基金Acknowledgements This work was supported in part by the Major State Basic Research Development Program of China （973 Program） （2007CB311201）, and the National Natural Science Foundation of China （Grant Nos. 60833008 and 60803149）, and foundation of Guangxi key laboratory of information and communication （20902）.
文摘A resynchronization attack is proposed on stream ciphers filtered by Maiorana-McFarland （M-M） functions and equipped with a linear resynchronization mechanism. The proposed attack utilizes the linear weakness of the resynchronization mechanism, the partial linearity of M-M functions, and applies the linear consistency test method to recover the secret key. It is shown that an M-M function should not be implemented by itself but rather in combination with other nonlinear components in stream ciphers using linear mechanisms to prevent the proposed attack. It is also shown that the use of linear resynchronization mechanisms should be avoided despite their high efficiency in stream ciphers filtered by M-M functions.
