Theoretical analysis of biases in TLS encryption scheme Chacha 128. (7th December 2022)

• Record Type: Journal Article
• Authors: Karthika, S.K.; Singh, Kunwar
• Is Part Of: International journal of ad hoc and ubiquitous computing. Volume 42:Number 1(2023)
• Page Start: 47
• Page End: 58
• Publication Date: 2022-12-07
• Subjects: transport layer security -- stream cipher -- Chacha -- theoretical analysis -- differential cryptanalysis; Ubiquitous computing -- Periodicals; Embedded computer systems -- Periodicals; Electronic data processing -- Distributed processing -- Periodicals; Wireless communication systems -- Periodicals; Computer architecture -- Periodicals; 004.2
• Languages: English
• ISSNs: 1743-8225

Abstract

Chacha is a software-oriented stream cipher designed by Bernstein (2008). Chacha is a Salsa variant that is eSTREAM project's finalist candidate. Google added Chacha and a message authentication code to their transport layer security (TLS) and datagram TLS (DTLS) protocols in 2016. Chacha has become an area of interest for cryptanalysis since its adoption by Google. Almost all the existing cryptanalysis is experimental. Experimental cryptanalysis identifies vulnerable areas of a cipher, whereas theoretical analysis helps in the development of possible countermeasures. Differential cryptanalysis is a cryptanalytic technique that helps in discovering distinguishers on stream ciphers. Recently, Dey and Sarkar (2021) have theoretically explored the reason behind distinguishers in Salsa and Chacha 256 stream cipher. Motivated by this work, we have theoretically analysed differential attacks on Chacha 128 (Chacha 256 variant) up to four rounds and we have the bias probabilities. Our theoretical analysis results match the experimental results.