Dynamic Cube Attacks against Grain-128AEAD

Abstract: In this paper, we revisit the division property based dynamic cube attack on the full Grain-128 presented by Hao et al. at FSE 2020 and demonstrate that their attack on the full Grain-128 is invalid, that is, no key information could be successfully recovered. The theoretical framework for the dynamic cube attack provided by Hao et al. is correct, but the technique for building the MILP model in the dynamic cube attack has flaws. Besides, strong evidence indicates that their bias estimation method is not applicable to Grain-128AEAD and Grain-128. Accordingly, we introduce the three-subset division property without unknown subset (3SDP/u) into dynamic cube attacks and present a correct MILP modeling technique. In addition, we propose a heuristic technique called Polynomial Approximation with regard to Bias (PAB) to evaluate the bias in superpolies in the dynamic cube attack, which can provide a more accurate bias evaluation for high-dimension cubes. As a result, we implemented the d.... https://tosc.iacr.org/index.php/ToSC/article/view/11627

Object Details

• Location: Deutsche Nationalbibliothek Frankfurt am Main
• Extent: Online-Ressource
• Language: Englisch

References and Relationships

• Bibliographic citation: Dynamic Cube Attacks against Grain-128AEAD ; volume:2024 ; number:2 ; year:2024 ; IACR transactions on symmetric cryptology ; 2024, Heft 2 (2024)

Contributors, Places and Time

• Creator: Liu, Chen ; Tian, Tian

Further information

• DOI: 10.46586/tosc.v2024.i2.190-221
• URN: urn:nbn:de:101:1-2407031855294.670860578624
• Rights: Open Access; Der Zugriff auf das Objekt ist unbeschränkt möglich.
• Last update: 14.08.2025, 11:00 AM CEST