A zero-sum property for the KECCAK-f permutation with 18 roundsReport as inadecuate

A zero-sum property for the KECCAK-f permutation with 18 rounds - Download this document for free, or read online. Document in PDF available to download.

1 SECRET - Security, Cryptology and Transmissions Inria Paris-Rocquencourt 2 Gemalto Meudon

Abstract : A new type of distinguishing property, named the zero-sum property has been recently presented by Aumasson and Meier. It has been applied to the inner permutation of the hash function Keccak and it has led to a distinguishing property for the Keccak-f permutation up to 16 rounds, out of 24 in total. Here, we additionally exploit some spectral properties of the Keccak-f permutation and we improve the previously known upper bounds on the degree of the inverse permutation after a certain number of rounds. This result enables us to extend the zero-sum property to 18 rounds of the Keccak-f permutation, which was the number of rounds in the previous version of Keccak submitted to the SHA-3 competition.

Author: Christina Boura - Anne Canteaut -

Source: https://hal.archives-ouvertes.fr/


Related documents