In early August 2024, three NSA researchers – Patricia Greene, Mark Motley, and Bryan Weeks – published the technical specifications for a new low-latency block cipher, ARADI, along with its corresponding authenticated encryption mode, LLAMA, which is specifically designed for memory encryption applications. Their manuscript offered minimal security analysis of the design, only briefly discussing the differential, linear and algebraic properties of cipher’s underlying components. In this work, we present a set of distinguishers for the round reduced ARADI block cipher, discovered using the automated cryptanalysis tool CLAASP. More precisely, using CLAASP, we evaluate the resistance of ARADI against avalanche, statistical and continuous diffusion tests, differential and linear distinguishers, impossible differentials, algebraic attacks, and neural distinguishers. Consequently, we give distinguishers and key recovery attacks that reach up to 10 and 11 out of 16 rounds of ARADI, respectively. We hope our findings will encourage further in-depth cryptanalysis of the cipher to enhance confidence in its security.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

CLAASPing ARADI: Automated Analysis of the ARADI Block Cipher

  • Emanuele Bellini,
  • Mattia Formenti,
  • David Gérault,
  • Juan Grados,
  • Anna Hambitzer,
  • Yun Ju Huang,
  • Paul Huynh,
  • Mohamed Rachidi,
  • Raghvendra Rohit,
  • Sharwan K. Tiwari

摘要

In early August 2024, three NSA researchers – Patricia Greene, Mark Motley, and Bryan Weeks – published the technical specifications for a new low-latency block cipher, ARADI, along with its corresponding authenticated encryption mode, LLAMA, which is specifically designed for memory encryption applications. Their manuscript offered minimal security analysis of the design, only briefly discussing the differential, linear and algebraic properties of cipher’s underlying components. In this work, we present a set of distinguishers for the round reduced ARADI block cipher, discovered using the automated cryptanalysis tool CLAASP. More precisely, using CLAASP, we evaluate the resistance of ARADI against avalanche, statistical and continuous diffusion tests, differential and linear distinguishers, impossible differentials, algebraic attacks, and neural distinguishers. Consequently, we give distinguishers and key recovery attacks that reach up to 10 and 11 out of 16 rounds of ARADI, respectively. We hope our findings will encourage further in-depth cryptanalysis of the cipher to enhance confidence in its security.