Algebraic Attacks on Stream Ciphers











![]()
Algebraic Attacks are a new powerful tool to cryptanalyse many stream ciphers previously believed very secure. All stream ciphers with linear feedback (one or several LFSR, linear cellular automata etc..) and a combiner are concerned, even if the combiner is stateful, and even if it is secret or key-dependent.
![]()
References - Algebraic attacks on stream ciphers:
Nicolas Courtois: Algebraic Attacks on Combiners with Memory and Several Outputs, to appear in ICISC 2004, just before Asiacrypt, in Korea, LNCS, Springer. The extended version of this paper is availble at eprint.iacr.org/2003/125/.
Philip Hawkes and Gregory G. Rose: Rewriting Variables: the Complexity of Fast Algebraic Attacks on Stream Ciphers.
Elad Barkan, Eli Biham, and Nathan Keller: Instant Ciphertext-Only Cryptanalysis of GSM Encrypted Communication. In Crypto 2003, LNCS 2729, pp: 600-616, Springer. In this paper we learn how to listen to tap encrypted conversations of cellular phones in real time. One of the attacks involves solving an overdefined system of multivariate quadratic equations.
Nicolas Courtois: Fast Algebraic Attacks on Stream Ciphers with Liner Feedback. In Crypto 2003, LNCS 2729, pp: 177-194, Springer.
Matthias Krause and Frederik Armknecht: Algrebraic Attacks on Combiners with Memory, Crypto 2003, August 17-21, Santa Barbara, CA, USA. To appear in LNCS 2729, pp: 162-176, Springer.


Nicolas Courtois, Willi Meier: Algebraic Attacks on Stream Ciphers with Liner Feedback. Eurocrypt 2003, LNCS 2656, pp. 345-359, Springer.![]()
References - How to avoid algebraic attacks on stream ciphers:
![]()
Interesting links:
Crypto Debates: The difficult question of strong cryptography
The AES 1 million dollar challenge (or why there should be such a thing)
Security of important ciphers used in practice: Security of DES
AES: is the new encryption standard already broken ?
New algebraic attacks on encrytion algorithms:
Algebraic attacks on block ciphers and AES
Algebraic attacks applied to stream ciphers
Positive applications of multivariate equations:
promoting/about multivariate cryptography:
The McEliece_based short signature scheme CFS
The HFE cryptosystem home page
The Minrank Zero-knowledge identification scheme
Quartz /Flash /Sflash signature schemes
Nicolas Courtois research page
TTM cryptosystem, GPT cryptosystem,
Open Problems in Multivariate Cryptography (Stork Document)
![]()