CryptoDB
Integral cryptanalysis in characteristic $p$
Authors: |
|
---|---|
Download: | |
Conference: | ASIACRYPT 2025 |
Abstract: | Integral and ultrametric integral cryptanalysis are generalized to finite rings of prime characteristic $p$ that are isomorphic to a product of fields. This extends, for instance, the complete state of the art in integral cryptanalysis from $\mathbb{F}_2^n$ to $\mathbb{F}_q^n$, for all prime powers $q$. A compact representation of transition matrices, based on convex polyhedra, is introduced to ensure that the proposed methods are computationally efficient even for large $p$. Automated tools are developed and applied to a few generic and several concrete primitives. The analysis shows that previous degree estimates for Feistel-GMiMC, HadesMiMC, AES-prime, small-pSquare and mid-pSquare are overly optimistic. Furthermore, except for AES-prime, these primitives do not meet their design criteria unless their number of rounds is substantially increased. |
BibTeX
@inproceedings{asiacrypt-2025-35908, title={Integral cryptanalysis in characteristic $p$}, publisher={Springer-Verlag}, author={Tim Beyne and Michiel Verbauwhede}, year=2025 }