CryptoDB
Bias in the nonlinear filter generator output sequence
| Authors: | |
|---|---|
| Download: | |
| Abstract: | Nonlinear filter generators are common components used in the keystream generators for stream ciphers and more recently for authentication mechanisms. They consist of a Linear Feedback Shift Register (LFSR) and a nonlinear Boolean function to mask the linearity of the LFSR output. Properties of the output of a nonlinear filter are not well studied. Anderson noted that the $m$-tuple output of a nonlinear filter with consecutive taps to the filter function is unevenly distributed. Current designs use taps which are not consecutive. We examine $m$-tuple outputs from nonlinear filter generators constructed using various LFSRs and Boolean functions for both consecutive and uneven (full positive difference sets where possible) tap positions. The investigation reveals that in both cases, the $m$-tuple output is not uniform. However, consecutive tap positions result in a more biased distribution than uneven tap positions, with some m-tuples not occurring at all. These biased distributions indicate a potential flaw that could be exploited for cryptanalysis. |
BibTeX
@misc{eprint-2010-23006,
title={Bias in the nonlinear filter generator output sequence},
booktitle={IACR Eprint archive},
keywords={Nonlinear filter generator, Stream Cipher, Output Sequences},
url={http://eprint.iacr.org/2010/105},
note={Accepted at the International Cryptology Conference 2010. This is the full version of the paper. sg.teo@qut.edu.au 14795 received 25 Feb 2010, last revised 4 Jul 2010},
author={Sui-Guan Teo and Leonie Simpson and Ed Dawson},
year=2010
}