Paper 2024/1772 Original: eprint.iacr.org/2024/1772 ↗
Byte-wise equal property of ARADI
Abstract
ARADI is a low-latency block cipher proposed by the NSA (National Security Agency) in 2024 for memory encryption. Bellini et al. experimentally demonstrated that in specific cubes of 5-round ARADI, the cube sums are byte-wise equal, for example, to 0x9d9dc5c5. This paper modifies the MILP-based division property algorithm to prove this and observes that the rotation amount of 8 in ARADI causes cancellations of monomials, allowing us to extend the byte-wise equal property up to 8 rounds. As a result, we obtained distinguishers for rounds 6 and 7 with lower data complexities of $2^{77}$ and $2^{112}$, respectively, compared to previous methods.
Metadata
- Available format(s)
PDF- Category
- Secret-key cryptography
- Publication info
- Preprint.
- History
- 2024-10-31: last updated
- 2024-10-31: published
- Short URL
- https://ia.cr/2024/1772
- License
- https://creativecommons.org/licenses/by-nc/4.0/
BibTeX
@misc{cryptoeprint:2024/1772,
author = {Sunyeop Kim and Insung Kim and Dongjae Lee and Deukjo Hong and Jaechul Sung and Seokhie Hong},
title = {Byte-wise equal property of ARADI},
howpublished = {Cryptology {ePrint} Archive, Paper 2024/1772},
year = {2024},
url = {https://eprint.iacr.org/2024/1772}
}