Practical Forgeries and Distinguishers against PAES

• المؤلفون الرئيسيون: Jean, Jérémy, Nikolic, Ivica, Sasaki, Yu, Wang, Lei
• مؤلفون آخرون: School of Physical and Mathematical Sciences
• التنسيق: مقال
• اللغة: English
• منشور في: 2016
• الموضوعات: PAES; Universal forgery; Distinguisher; Symmetric property; Authenticated encryption
• الوصول للمادة أونلاين: https://hdl.handle.net/10356/82018; http://hdl.handle.net/10220/39784

We present two practical attacks on the CAESAR candidate PAES. The first attack is a universal forgery for any plaintext with at least 240 bytes. It works for the nonce-repeating variant of PAES and in a nutshell it is a state recovery based on solving differential equations for the S-Box leaked thr...