Paper 2025/1418 Original: eprint.iacr.org/2025/1418 ↗
Note: Shared Key Recovery Attack on Cascader Key Exchange Protocol
Abstract
Cascader has been introduced as a new key exchange protocol based on iterative multiplicative recurrence. This short note presents a practical shared key recovery attack on the Cascader key exchange protocol. This note also shows that Cascader as a hash function is not collision resistant, presents a new upper bound on the output space of Cascader and shows that a Cascader-based KDF is not secure against an Adaptive Chosen Public Inputs Attack (CPM).
Metadata
- Available format(s)
PDF- Category
- Attacks and cryptanalysis
- Publication info
- Preprint.
- History
- 2025-08-04: last updated
- 2025-08-04: published
- Short URL
- https://ia.cr/2025/1418
- License
- https://creativecommons.org/licenses/by-sa/4.0/
BibTeX
@misc{cryptoeprint:2025/1418,
author = {Nick Aquina and Simon Rommel and Idelfonso Tafur Monroy},
title = {Note: Shared Key Recovery Attack on Cascader Key Exchange Protocol},
howpublished = {Cryptology {ePrint} Archive, Paper 2025/1418},
year = {2025},
url = {https://eprint.iacr.org/2025/1418}
}