Analysis of VAES3 (FF2)

Morris Dworkin; Ray Perlner

Paper 2015/306 Original: eprint.iacr.org/2015/306 ↗

Analysis of VAES3 (FF2)

Morris Dworkin

Ray Perlner

Abstract

The National Institute of Standards and Technology (NIST) specified three methods for format-preserving encryption (FPE) in Draft NIST Special Publication (SP) 800-38G, which was released for public comment in July, 2013. Each method was a mode of operation of the Advanced Encryption Standard (AES). One of the three modes, VAES3, was specified under the name FF2 in the NIST draft. This note describes a theoretical chosen-plaintext attack that shows the security strength of FF2 is less than 128 bits.

Metadata

Available format(s): PDF
Category: Secret-key cryptography
Publication info: Preprint.
History: 2015-04-06: last updated; 2015-04-06: published
Short URL: https://ia.cr/2015/306
License: https://creativecommons.org/licenses/by/4.0/

BibTeX

@misc{cryptoeprint:2015/306,
      author = {Morris Dworkin and Ray Perlner},
      title = {Analysis of VAES3 (FF2)},
      howpublished = {Cryptology {ePrint} Archive, Paper 2015/306},
      year = {2015},
      url = {https://eprint.iacr.org/2015/306}
}