Analysis on the Weak States of AEGIS

SHI Tai-rong; GUAN Jie; LIU Wen-zhe

doi:10.3969/j.issn.0372-2112.2018.09.009

您当前的位置：

首页 >

文章列表页 >

Analysis on the Weak States of AEGIS

更新时间：2025-07-16

- Analysis on the Weak States of AEGIS
- Acta Electronica Sinica Vol. 46, Issue 9, Pages: 2102-2107(2018)
- 作者机构：
  
  1. 信息工程大学,河南,郑州,450001
  2. 61415 部队,内蒙古,呼伦贝尔,021009
  3. 信息工程大学,河南,郑州,450001
  4. 61415 部队,内蒙古,呼伦贝尔,021009
- 作者简介：
- 基金信息：
  
  National Natural Science Foundation of China (No.61572516, No.61602514)
- DOI：10.3969/j.issn.0372-2112.2018.09.009
  CLC： TN918.1
- Published Online：25 September 2018，
  
  Published：2018
- 稿件说明：
移动端阅览
SHI Tai-rong, GUAN Jie, LIU Wen-zhe. Analysis on the Weak States of AEGIS[J]. Acta Electronica Sinica, 2018, 46(9): 2102-2107.
DOI：

SHI Tai-rong, GUAN Jie, LIU Wen-zhe. Analysis on the Weak States of AEGIS[J]. Acta Electronica Sinica, 2018, 46(9): 2102-2107. DOI： 10.3969/j.issn.0372-2112.2018.09.009.

摘要

AEGIS算法是进入CAESAR竞赛（Competition for Authenticated Encryption：Security，Applicability，and Robustness）第三轮评选的认证加密算法.根据内部状态和密钥长度的不同，设计者推荐了三个AEGIS系列算法：AEGIS-128、AEGIS-256和AEGIS-128L.本文分别给出AEGIS-256和AEGIS-128L算法一组新的弱状态，对应出现的概率远优于现有分析结果.在此基础上，针对AEGIS-256算法，本文实现了对算法的伪造攻击，并给出内部状态与各自的明文对应，使得产生的认证标签为全0；针对AEGIS-128L算法，本文得到了算法在弱状态下的信息泄漏规律.最后对AEGIS系列算法弱状态的成因进行分析，给出了具体的设计及使用建议.目前，除设计报告外尚无对AEGIS算法的弱状态的分析，因此该文对CAESAR竞选有重要意义.

Abstract

AEGIS

an authenticated stream cipher

is one of fifteen third-round candidates of CAESAR competition (Competition for Authenticated Encryption: Security

Applicability

and Robustness). Three AEGIS versions: AEGIS-128、AEGIS-256 and AEGIS-128L are recommended in different internal state and key sizes. This paper proposes two types of weak state for AEGIS-256 and AEGIS-128L respectively. The probabilities of these types of weak state are greater than the existing results. And based on those analyses

a forgery attack on AEGIS-256 is introduced. Indeed

we present internal states with the corresponding plaintexts

in which the tags are 0. As for AEGIS-128L

we attain the information leakage of encryption. Finally

we give brief analysis of what is responsible for weak states. To the best of our knowledge

except for design document

there is no cryptanalysis on weak state of AEGIS proposed until now. Therefore

our work is significant for CAESAR competition.

关键词

Keywords

references

Views

245

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Improved Scheme of the Forgeable Self-Certified Signature

Security Analysis and Improvement of a Certificateless Signature Scheme in the Standard Model

Related Author

LI Xin-guo

GE Jian-hua

ZHAO Chun-ming

YANG Xiao-dong

WANG Mei-ding

PEI Xi-zhen

LI Yu-tong

CHEN Chun-lin

Related Institution

National Key Lab of ISN,Xidian University

Dept.of Mathematics,PLA Foreign Language Institute

National Key Lab of ISNXidian UniversityXi'anShaanxi 710071China

Dept.of MathematicsPLA Foreign Language InstituteLuoyangHenan 471003China

College of Computer Science and Engineering, Northwest Normal University

⁰