Paper 2005/244 Original: eprint.iacr.org/2005/244 ↗
Theoretical cryptanalysis of the Klimov-Shamir number generator TF-1
Abstract
The internal state of the Klimov-Shamir number generator TF-1 consists of four words of size w bits each, whereas its intended strength is 2^{2w}. We exploit an asymmetry in its output function to show that the internal state can be recovered after having 2^w outputs, using 2^{1.5w} operations. For w=32 the attack is practical, but for their recommended w=64 it is only of theoretical interest.
Metadata
- Available format(s)
PDF- Category
- Secret-key cryptography
- Publication info
- Preprint.
- History
- 2005-07-30: last updated
- 2005-07-30: published
- Short URL
- https://ia.cr/2005/244
- License
- https://creativecommons.org/licenses/by/4.0/
BibTeX
@misc{cryptoeprint:2005/244,
author = {Boaz Tsaban},
title = {Theoretical cryptanalysis of the Klimov-Shamir number generator TF-1},
howpublished = {Cryptology {ePrint} Archive, Paper 2005/244},
year = {2005},
url = {https://eprint.iacr.org/2005/244}
}