International Association for Cryptologic Research

International Association
for Cryptologic Research

CryptoDB

Designing Against the `Overdefined System of Equations' Attack

Authors:
Carlisle Adams
Download:
URL: http://eprint.iacr.org/2004/110
Search ePrint
Search Google
Abstract: Recently, Courtois and Pieprzyk proposed an attack on symmetric ciphers that takes advantage of a previously-unexploited property of substitution boxes, or s-boxes, in the round function. This paper gives a brief overview of this ``overdefined system of equations'' attack and shows how the attack may be avoided through the use of round functions that contain a variety of protection mechanisms, including combinations of operators from different algebraic groups, a circular rotation step, and substitution boxes (s-boxes) of large dimension.
BibTeX
@misc{eprint-2004-12082,
  title={Designing Against the `Overdefined System of Equations' Attack},
  booktitle={IACR Eprint archive},
  keywords={secret-key cryptography / symmetric cipher design, cryptanalysis, substitution box, round function},
  url={http://eprint.iacr.org/2004/110},
  note={ cadams@site.uottawa.ca 12549 received 10 May 2004, last revised 11 May 2004},
  author={Carlisle Adams},
  year=2004
}