Slide attacks and LC-weak keys in T-310. Issue 3 (4th May 2019)

• Record Type: Journal Article
• Authors: Courtois, Nicolas T.; Georgiou, Marios; Scarlata, Matteo
• Is Part Of: Cryptologia. Volume 43:Issue 3(2019)
• Page Start: 175
• Page End: 189
• Publication Date: 2019-05-04
• Subjects: block ciphers -- Cold War -- decryption oracle -- linear cryptanalysis -- SAT solvers -- slide attacks -- T-310 -- unbalanced compressing Feistel ciphers -- weak key attacks; Cryptography -- Periodicals; 652.8
• DOI: 10.1080/01611194.2018.1548392
• Languages: English
• ISSNs: 0161-1194

Abstract

Abstract: T-310 is an important Cold War cipher (Cryptologia 2006). In a recent article (Cryptologia 2018), researchers show that, in spite of specifying numerous very technical requirements, the designers do not protect the cipher against linear cryptanalysis and some 3% of the keys are very weak. However, such a weakness does not necessarily allow breaking the cipher because it is extremely complex and extremely few bits from the internal state are used for the actual encryption. In this article, we finally show a method that allows recovering a part of the secret key for about half of such weak keys in a quasi-realistic setting. For this purpose, we revisit another recent article from Cryptologia from 2018 and introduce a new peculiar variant of the decryption oracle slide attack with d = 0.