(Non-)random sequences from (Non-)random permutations - Analysis of RC4 stream cipher

Journal of Cryptology

Volumn 27, Issue 1, 2014, Pages 67-108

  Sen Gupta, Sourav ^a   Maitra, Subhamoy ^a   Paul, Goutam ^b   Sarkar, Santanu ^a  

^a INDIAN STATISTICAL INSTITUTE   (India)

^b JADAVPUR UNIVERSITY   (India)

Author keywords

Bias; Distinguisher; Keylength recovery; Probability distribution; Pseudo random sequences; RC4; Stream ciphers

Indexed keywords

EID: 84894899538     PISSN: 09332790     EISSN: 14321378     Source Type: Journal    
DOI: 10.1007/s00145-012-9138-1     Document Type: Article

References (37)

1. M. Akgün, P. Kavak, H. Demirci, New results on the key scheduling algorithm of RC4, in INDOCRYPT'08. Lecture Notes in Computer Science, vol. 5365 (2008), pp. 40-52
2. R. Basu, S. Ganguly, S. Maitra, G. Paul, A complete characterization of the evolution of RC4 pseudo random generation algorithm. J. Math. Cryptol. 2(3), 257-289 (2008)
3. R. Basu, S. Maitra, G. Paul, T. Talukdar, On some sequences of the secret pseudo-random index j in RC4 key scheduling, in AAECC'09. Lecture Notes in Computer Science, vol. 5527 (2009), pp. 137-148
4. E. Biham, Y. Carmeli, Efficient reconstruction of RC4 keys from internal states, in FSE'08. Lecture Notes in Computer Science, vol. 5086 (2008), pp. 270-288
5. J. Chen, A. Miyaji, How to find short RC4 colliding key pairs, in ISC'11. Lecture Notes in Computer Science, vol. 7001 (2011), pp. 32-46
6. S.R. Fluhrer, D.A. McGrew, Statistical analysis of the alleged RC4 keystream generator, in FSE'00. Lecture Notes in Computer Science, vol. 1978 (2000), pp. 19-30
7. S.R. Fluhrer, I. Mantin, A. Shamir, Weaknesses in the key scheduling algorithm of RC4, in SAC'01. Lecture Notes in Computer Science, vol. 2259 (2001), pp. 1-24
8. J.D. Golic, Linear statistical weakness of alleged RC4 keystream generator, in EUROCRYPT'97. Lecture Notes in Computer Science, vol. 1233 (1997), pp. 226-238
9. J.D. Golic, Iterative probabilistic cryptanalysis of RC4 keystream generator, in ACISP'00. Lecture Notes in Computer Science, vol. 1841 (2000), pp. 220-233
10. J.D. Golic, G. Morgari, Iterative probabilistic reconstruction of RC4 internal states. IACR Cryptology ePrint Archive, Report 2008/348 (2008). Available at http://eprint.iacr.org/2008/348
11. A.L. Grosul, D.S. Wallach, A related-key cryptanalysis of RC4. Technical Report TR-00-358, Department of Computer Science, Rice University (2000)
12. R.J. Jenkins, ISAAC and RC4 (1996). Published on the Internet at http://burtleburtle.net/bob/rand/isaac.html
13. S. Khazaei, W. Meier, On reconstruction of RC4 keys from internal states, in MMICS'08. Lecture Notes in Computer Science, vol. 5393 (2008), pp. 179-189
14. A. Klein, Attacks on the RC4 stream cipher. Des. Codes Cryptogr. 48(3), 269-286 (2008)
15. L.R. Knudsen, W. Meier, B. Preneel, V. Rijmen, S. Verdoolaege, Analysis methods for (alleged) RC4, in ASIACRYPT'98. Lecture Notes in Computer Science, vol. 1514 (1998), pp. 327-341
16. S. Maitra, G. Paul, S. Sen Gupta, Attack on broadcast RC4 revisited, in FSE'11. Lecture Notes in Computer Science, vol. 6733 (2011), pp. 199-217
17. I. Mantin, Analysis of the stream cipher RC4. Master's Thesis, The Weizmann Institute of Science, Israel (2001). Available at http://www.wisdom. weizmann.ac.il/~itsik/RC4/rc4.html
18. I. Mantin, A. Shamir, A practical attack on broadcast RC4, in FSE'01. Lecture Notes in Computer Science, vol. 2355 (2002), pp. 152-164
19. I. Mantin, Predicting and distinguishing attacks on RC4 keystream generator, in EUROCRYPT'05. Lecture Notes in Computer Science, vol. 3494 (2005), pp. 491-506
20. I. Mantin, A practical attack on the fixed RC4 in the WEP mode, in ASIACRYPT'05. Lecture Notes in Computer Science, vol. 3788 (2005), pp. 395-411
21. M. Matsui, Key collisions of the RC4 stream cipher, in FSE'09. Lecture Notes in Computer Science, vol. 5665 (2009), pp. 38-50
22. A. Maximov, D. Khovratovich, New state recovery attack on RC4, in CRYPTO'08. Lecture Notes in Computer Science, vol. 5157 (2008), pp. 297-316
23. I. Mironov, (Not so) random shuffles of RC4, in CRYPTO'02. Lecture Notes in Computer Science, vol. 2442 (2002), pp. 304-319
24. S. Mister, S.E. Tavares, Cryptanalysis of RC4-like ciphers, in SAC'98. Lecture Notes in Computer Science, vol. 1999 (1998), pp. 131-143
25. S. Paul, B. Preneel, Analysis of non-fortuitous predictive states of the RC4 keystream generator, in INDOCRYPT'03. Lecture Notes in Computer Science, vol. 2904 (2003), pp. 52-67
26. G. Paul, S. Maitra, Permutation after RC4 key scheduling reveals the secret key, in SAC'07. Lecture Notes in Computer Science, vol. 4876 (2007), pp. 360-377
27. A. Roos, A class of weak keys in the RC4 stream cipher. Two posts in sci.crypt, message-id 43u1eh1j3@hermes.is.co.za and 44ebgellf@hermes.is.co.za (1995). Available at http://www.impic.org/papers/WeakKeys-report.pdf
28. S. Sen Gupta, S. Maitra, G. Paul, S. Sarkar, Proof of empirical RC4 biases and new key correlations, in SAC'11. Lecture Notes in Computer Science, vol. 7118 (2011), pp. 151-168
29. P. Sepehrdad, Statistical and algebraic cryptanalysis of lightweight and ultra-lightweight symmetric primitives. Ph.D. Thesis, No. 5415, École Polytechnique Fédérale de Lausanne (EPFL) (2012). Available at http://lasecwww.epfl.ch/~sepehrdad/Pouyan-Sepehrdad-PhD-Thesis.pdf
30. P. Sepehrdad, S. Vaudenay, M. Vuagnoux, Discovery and exploitation of new biases in RC4, in SAC'10. Lecture Notes in Computer Science, vol. 6544 (2011), pp. 74-91
31. P. Sepehrdad, S. Vaudenay, M. Vuagnoux, Statistical attack on RC4 - distinguishing WPA, in EUROCRYPT'11. Lecture Notes in Computer Science, vol. 6632 (2011), pp. 343-363
32. Y. Shiraishi, T. Ohigashi, M. Morii, An improved internal-state reconstruction method of a stream cipher RC4, in Communication, Network, and Information Security. Track 440-088, New York, USA, December 10-12 (2003)
33. V. Tomasevic, S. Bojanic, O. Nieto-Taladriz, Finding an internal state of RC4 stream cipher. Inf. Sci. 177, 1715-1727 (2007)
34. E. Tews, R.-P. Weinmann, A. Pyshkin, Breaking 104 bit WEP in less than 60 seconds, in WISA'07. Lecture Notes in Computer Science, vol. 4867 (2007), pp. 188-202
35. E. Tews, M. Beck, Practical attacks against WEP and WPA, in WISEC'09 (ACM, New York, 2009), pp. 79-86
36. S. Vaudenay, M. Vuagnoux, Passive-only key recovery attacks on RC4, in SAC'07. Lecture Notes in Computer Science, vol. 4876 (2007), pp. 344-359
37. D.A. Wagner, My RC4 weak keys (1995). http://www.cs.berkeley.edu/~daw/my- posts/my-rc4-weak-keys