@inproceedings{d169f066360e4723b984032709d85ab7,
title = "Cube attacks and cube-attack-like cryptanalysis on the round-reduced Keccak sponge function",
abstract = "In this paper, we comprehensively study the resistance of keyed variants of SHA-3 (Keccak) against algebraic attacks. This analysis covers a wide range of key recovery, MAC forgery and other types of attacks, breaking up to 9 rounds (out of the full 24) of the Keccak internal permutation much faster than exhaustive search. Moreover, some of our attacks on the 6-round Keccak are completely practical and were verified on a desktop PC. Our methods combine cube attacks (an algebraic key recovery attack) and related algebraic techniques with structural analysis of the Keccak permutation. These techniques should be useful in future cryptanalysis of Keccak and similar designs. Although our attacks break more rounds than previously published techniques, the security margin of Keccak remains large. For Keyak - the Keccak-based authenticated encryption scheme - the nominal number of rounds is 12 and therefore its security margin is smaller (although still sufficient).",
keywords = "Cube attack, Keccak, SHA-3, Sponge function",
author = "Itai Dinur and Pawe{\l} Morawiecki and Josef Pieprzyk and Marian Srebrny and Micha{\l} Straus",
note = "Publisher Copyright: {\textcopyright} International Association for Cryptologic Research 2015.; 34th Annual International Conference on the Theory and Applications of Cryptographic Techniques, Eurocrypt 2015 ; Conference date: 26-04-2015 Through 30-04-2015",
year = "2015",
month = jan,
day = "1",
doi = "10.1007/978-3-662-46800-5_28",
language = "English",
isbn = "9783662467992",
series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",
publisher = "Springer Verlag",
pages = "733--761",
editor = "Marc Fischlin and Elisabeth Oswald",
booktitle = "Advances in Cryptology – EUROCRYPT 2015 - 34th Annual International Conference on the Theory and Applications of Cryptographic Techniques, Proceedings",
address = "Germany",
}