New weakness in the key-scheduling algorithm of RC4

IEICE Transactions on Fundamentals of Electronics, Communications and Computer Sciences

Volumn E91-A, Issue 1, 2008, Pages 3-11

  Ohigashi, Toshihiro ^a   Shiraishi, Yoshiaki ^b   Morii, Masakatu ^a  

^a KOBE UNIVERSITY   (Japan)

^b NAGOYA INSTITUTE OF TECHNOLOGY   (Japan)

Author keywords

Cryptanalysis; Key scheduling algorithm; RC4; Stream cipher

Indexed keywords

ACCESS CONTROL; INVERSE PROBLEMS; RECOVERY; SCHEDULING ALGORITHMS;

CIPHERTEXTS; CRYPTANALYSIS; EXHAUSTIVE KEY SEARCH; HIGH PROBABILITY; INITIAL STATE; INTERNAL STATE; STREAM CIPHERS; TIME COMPLEXITY;

CRYPTOGRAPHY;

EID: 70350556447     PISSN: 09168508     EISSN: 17451337     Source Type: Journal    
DOI: 10.1093/ietfec/e91-a.1.3     Document Type: Article

References (40)

1. R.A. Rueppel, Analysis and Design of Stream Ciphers, Springer-Verlag, Berlin, 1986.
2. R.A. Rueppel, "Stream ciphers," in Contemporary Cryptology, ed. G.J. Simmons, pp.65-134, IEEE Press, New York, 1992.
3. D. Bleichenbacher and S. Patel, "SOBER cryptanalysis," Proc. FSE'99, LNCS 1636, pp.305-316, Springer-Verlag, 1999.
4. P. Hawkes and G. Rose, "Exploiting multiples of the connection polynomial in word-oriented stream cipher," Proc. ASIACRYPT2000, LNCS 1976, pp.302-316, Springer-Verlag, 2000.
5. P. Hawkes and G. Rose, "Guess-and-determine attacks on SNOW," Proc. SAC'02, LNCS 2595, pp.37-116, Springer-Verlag, 2003.
6. S. Kiyomoto, T. Tanaka, and K. Sakurai, "Experimental analysis of guess-and-determine attacks on clock-controlled stream ciphers," IEICE Trans. Fundamentals, vol.E88-A, no.10, pp.2778-2791, Oct. 2005.
7. H. Ahmadi, T. Eghlidos, and S. Khazaei, "Improved guess and determine attack on SOSEMANUK," ECRYPT Stream Cipher Project, Report 2005/085, 2005, available at http://www.ecrypt.eu.org/stream/papersdir/085.pdf
8. Y. Tsunoo, T. Saito, M. Shigeri, T. Suzaki, H. Ahmadi, T. Eghlidos, and S. Khazaei, "Evaluation of SOSEMANUK with regard to guess-and-determine attacks," ECRYPT Stream Cipher Project, Report 2006/009, 2006, available at http://www.ecrypt.eu.org/stream/papersdir/2006/009.pdf
9. J. Mattsson, "A guess-and-determine attack on the stream cipher Polar Bear," ECRYPT Stream Cipher Project, Report 2006/017, 2006, available at http://www.ecrypt.eu.org/stream/papersdir/2006/017.pdf
10. B. Schneier, Applied Cryptography, Wiley, New York, 1996.
11. IEEE Computer Society, "Wireless Ian medium access control (MAC) and physical layer (PHY) specifications," IEEE Std 802.11, 1999.
12. S. Fluhrer, I. Mantin, and A. Shamir, "Weaknesses in the key scheduling algorithm of RC4," Proc. SAC2001, LNCS 2259, pp.1-24, Springer-Verlag, 2001.
13. S. Fluhrer, I. Mantin, and A. Shamir, "Attacks on RC4 and WEP," CryptoBytes, vol.5, no.2, pp.26-34, RSA Laboratories, 2002.
14. A. Stubblefield, J. Ioannidis, and A.D. Rubin, "A key recovery attack on the 802.11b wired equivalent privacy protocol (WEP)," ACM Trans. Information and System Security, vol.7, no.2, pp.319-332, May 2004.
15. Wepcrack, available at http://sourceforge.net/projects/wepcrack/
16. K. Kobara and H. Imai, "Yet other weak IVs for recovering wep keys" Proc. ISITA2004, pp.1130-1134, Parma, Italy, Oct. 2004.
17. T. Ohigashi, Y. Shiraishi, and M. Morii, "FMS attack-resistant WEP implementation is still broken - Most IVs leak a part of key information," Proc. CIS2005, Part II, Lecture Notes in Artificial Intelligence, vol.3802, pp.17-26, Springer-Verlag, 2005.
18. K. Kobara and H. Imai, "Key-dependent weak IVs and weak keys in WEP - How to trace conditions back to their patterns," IEICE Trans. Fundamentals, vol.E89-A, no.8, pp.2198-2206, Aug. 2006.
19. KoreK, "Next generation of WEP attacks?" 2004, available at http://www.netstumbler.org/showpost.php?p=93942&postcount=35
20. A. Klein, "Attacks on the RC4 stream cipher," 2006, available at http://cage.ugent.be/~klein/RC4/RC4-en.ps
21. E. Tews, R. Weinmann, and A. Pyshkin, "Breaking 104 bit WEP in less than 60 seconds," Cryptology ePrint, 2007, available at http://eprint.iacr.org/2007/120.pdf
22. A. Freier, P. Karlton, and P. Kocher, "The SSL 3.0 protocol," Netscape Communications, Nov. 1996.
23. Wi-Fi Alliance, "Wi-Fi protected access," available at http://www.weca.net/opensection/protected-access.asp
24. J. Dj. Golić, "Iterative probabilistic cryptanalysis of RC4 keystream generator," Proc. ACISP2000, LNCS 1841, pp.220-233, Springer-Verlag, 2000.
25. I. Dj. Golić, "Linear statistical weakness of alleged RC4 keystream generator," Proc. EUROCRYPT'97, LNCS 1233, pp.226-238, Springer-Verlag, 1997.
26. S. Fluhrer and D. McGrew, "Statistical analysis of the alleged RC4 keystream generator" Proc. FSE2000, LNCS 1978, pp.19-30, 2001.
27. I. Mantin and A. Shamir, "A practical attack on broadcast RC4," Proc. FSE2001, LNCS 2355, pp.152-164, Springer-Verlag, 2001.
28. S. Paul and B. Preneel, "A new weakness in the RC4 keystream generator and an approach to improve the security of the cipher," Proc. FSE2004, LNCS 3017, pp.245-259, Springer-Verlag, 2004.
29. I. Mantin, "Predicting and distinguishing attacks on RC4 keystream generator," Proc. EUROCRYPT2005, LNCS 3494, pp.491-506, Springer-Verlag, 2005.
30. R. Jenkins, "Isaac and RC4," available at http://burtleburtle. net/bob/rand/isaac.html
31. L.R. Knudsen, W. Meier, B. Preneel, V. Rijmen, and S. Verdoolaege, "Analysis methods for (alleged) RC4," Proc. ASIACRYPT'98, LNCS 1514, pp.327-341, Springer-Verlag, 1998.
32. S. Mister and S.E. Tavares, "Cryptanalysis of RC4-like ciphers," Proc. SAC'98, LNCS 1556, pp.131-143, Springer-Verlag, 1999.
33. Y Shiraishi, T. Ohigashi, and M. Morii, "Internal-state reconstruction of a stream cipher RC4," IEICE Trans. Fundamentals, vol.E86-A, no.10, pp.2636-2638, Oct. 2003.
34. V. Tomaševič and S. Bojanič, "Reducing the state space of RC4 stream cipher," Proc. ICCS2004, LNCS 3036, pp.644-647, Springer-Verlag, 2004.
35. D. Wagner, "My RC4 weak keys," Post in sci.crypt, 1995.
36. AirSnort, available at http://airsnort.shmoo.com/
37. Aircrack, http://www.cr0.net:8040/code/network/aircrack/
38. Dwepcrack, http://www.e.kth.se/~pvz/wifi/
39. Weplab, http://weplab.sourceforge.net/
40. Orinoco, "WEPplus white paper," Oct. 2001.