Paper 2003/162 Original: eprint.iacr.org/2003/162 ↗

Cryptanalysis of the Alleged SecurID Hash Function

Alex Biryukov
Joseph Lano
Bart Preneel
Abstract

The SecurID hash function is used for authenticating users to a corporate computer infrastructure. We analyse an alleged implementation of this hash function. The block cipher at the heart of the function can be broken in few milliseconds on a PC with 70 adaptively chosen plaintexts. The 64-bit secret key of 10$\%$ of the cards can be discovered given two months of token outputs and $2^{48}$ analysis steps. A larger fraction of cards can be covered given more observation time.

Metadata
Available format(s)
PDF
Category
Secret-key cryptography
Publication info
Preprint.
History
2003-10-29: last updated
2003-08-11: published
Short URL
https://ia.cr/2003/162
License
https://creativecommons.org/licenses/by/4.0/

BibTeX

@misc{cryptoeprint:2003/162,
      author = {Alex Biryukov and Joseph Lano and Bart Preneel},
      title = {Cryptanalysis of the Alleged SecurID Hash Function},
      howpublished = {Cryptology {ePrint} Archive, Paper 2003/162},
      year = {2003},
      url = {https://eprint.iacr.org/2003/162}
}
Note: In order to protect the privacy of readers, this archive does not use cookies or embedded third party content.