Presentation 2021-03-02
The linear probability of the stream cipher Salsa
Junru Li, Atsuko Miyaji,
PDF Download Page PDF download Page Link
Abstract(in Japanese) (See Japanese page)
Abstract(in English) Salsa20 is a stream cipher designed by D.J. Bernstein in 2005. One of the effective attack methods applied to Salsa20 is a key recovery attack by differential cryptanalysis. The differential cryptanalysis is a method of discovering the non-randomness of cryptographic algorithms by tracking how input differences affect output differences. In this paper, we focused on the relationship between the output difference and the input difference at a specific position through Salsa’s Quarter round, and conducted an experiment to investigate the position of the input difference when the output difference appears. For a 1-bit input difference, the position survey is performed so that the probability of the output difference appearing is as far from 1/2 as possible and close to 1 or 0. As a result, we found a line format that can express the relationship between the output difference after one round and the position of the input difference, and proved it theoretically.
Keyword(in Japanese) (See Japanese page)
Keyword(in English) stream cipher / Salsa20 / theory
Paper # ICSS2020-51
Date of Issue 2021-02-22 (ICSS)

Conference Information
Committee ICSS / IPSJ-SPT
Conference Date 2021/3/1(2days)
Place (in Japanese) (See Japanese page)
Place (in English) Online
Topics (in Japanese) (See Japanese page)
Topics (in English) Security, Trust, etc.
Chair Hiroki Takakura(NII)
Vice Chair Katsunari Yoshioka(Yokohama National Univ.) / Kazunori Kamiya(NTT)
Secretary Katsunari Yoshioka(NICT) / Kazunori Kamiya(KDDI labs.)
Assistant Keisuke Kito(Mitsubishi Electric) / Toshihiro Yamauchi(Okayama Univ.)

Paper Information
Registration To Technical Committee on Information and Communication System Security / Special Interest Group on Security Psychology and Trust
Language JPN
Title (in Japanese) (See Japanese page)
Sub Title (in Japanese) (See Japanese page)
Title (in English) The linear probability of the stream cipher Salsa
Sub Title (in English)
Keyword(1) stream cipher
Keyword(2) Salsa20
Keyword(3) theory
1st Author's Name Junru Li
1st Author's Affiliation Osaka University(Osaka Univ.)
2nd Author's Name Atsuko Miyaji
2nd Author's Affiliation Osaka University/Japan Advanced Institute of Science and Technology(Osaka Univ./JAIST)
Date 2021-03-02
Paper # ICSS2020-51
Volume (vol) vol.120
Number (no) ICSS-384
Page pp.pp.150-153(ICSS),
#Pages 4
Date of Issue 2021-02-22 (ICSS)