Key Committing Attacks against AES-based AEAD Schemes - Université de Rennes
Article Dans Une Revue IACR Transactions on Symmetric Cryptology Année : 2024

Key Committing Attacks against AES-based AEAD Schemes

Takanori Isobe
  • Fonction : Auteur
  • PersonId : 1438452
Mostafizar Rahman
  • Fonction : Auteur
  • PersonId : 1438453

Résumé

Recently, there has been a surge of interest in the security of authenticated encryption with associated data (AEAD) within the context of key commitment frameworks. Security within this framework ensures that a ciphertext chosen by an adversary does not decrypt to two different sets of key, nonce, and associated data. Despite this increasing interest, the security of several widely deployed AEAD schemes has not been thoroughly examined within this framework. In this work, we assess the key committing security of several AEAD schemes. First, the AEGIS family, which emerged as a winner in the Competition for Authenticated Encryption: Security, Applicability, and Robustness (CAESAR), and has been proposed to standardization at the IETF. A now outdated version of the draft standard suggested that AEGIS could qualify as a fully committing AEAD scheme; we prove that it is not the case by proposing a novel attack applicable to all variants, which has been experimentally verified. We also exhibit a key committing attack on Rocca-S. Our attacks are executed within the FROB game setting, which is known to be one of the most stringent key committing frameworks. This implies that they remain valid in other, more relaxed frameworks, such as CMT-1, CMT-4, and so forth. Finally, we show that applying the same attack techniques to Rocca and Tiaoxin-346 does not compromise their key-committing security. This observation provides valuable insights into the design of such secure round update functions for AES-based AEAD schemes.
Fichier principal
Vignette du fichier
main.pdf (1.34 Mo) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)
Licence

Dates et versions

hal-04773876 , version 1 (08-11-2024)

Licence

Identifiants

Citer

Patrick Derbez, Pierre-Alain Fouque, Takanori Isobe, Mostafizar Rahman, André Schrottenloher. Key Committing Attacks against AES-based AEAD Schemes. IACR Transactions on Symmetric Cryptology, 2024, 2024 (1), pp.135-157. ⟨10.46586/tosc.v2024.i1.135-157⟩. ⟨hal-04773876⟩
0 Consultations
0 Téléchargements

Altmetric

Partager

More