A Note on ARADI and LLAMA

Roberto Avanzi; Orr Dunkelman; Shibam Ghosh

Paper 2024/1328 Original: eprint.iacr.org/2024/1328 ↗

A Note on ARADI and LLAMA

Roberto Avanzi

Orr Dunkelman

Shibam Ghosh

Abstract

Recently, the NSA has proposed a block cipher called ARADI and a mode of operation called LLAMA for memory encryption applications. In this note, we comment on this proposal, on its suitability for the intended application, and describe an attack on LLAMA that breaks confidentiality of ciphertext and allows a straightforward forgery attack breaking integrity of ciphertext (INT-CTXT) using a related-IV attack. Both attacks have negligible complexity.

Metadata

Available format(s): PDF
Category: Secret-key cryptography
Publication info: Preprint.
History: 2024-08-31: last updated; 2024-08-24: published
Short URL: https://ia.cr/2024/1328
License: https://creativecommons.org/licenses/by-nc-sa/4.0/

BibTeX

@misc{cryptoeprint:2024/1328,
      author = {Roberto Avanzi and Orr Dunkelman and Shibam Ghosh},
      title = {A Note on ARADI and LLAMA},
      howpublished = {Cryptology {ePrint} Archive, Paper 2024/1328},
      year = {2024},
      url = {https://eprint.iacr.org/2024/1328}
}