Algebraic analysis of Trivium and Trivium/128
by Mehreen Afzal, Ashraf Masood
International Journal of Electronic Security and Digital Forensics (IJESDF), Vol. 1, No. 4, 2008

Abstract: Trivium an eSTREAM candidate has an internal state of 288 bits, and it has been designed to provide a security level of 80 bits. Recently, its tweaked structure Trivium/128 with three added gates is also proposed which is meant to provide the security level of 128 bits without any increase in the internal state bits. This article presents an algebraic analysis of the key generating structure of both versions. Our experiments target to recover the internal state bits by solving practically the varying degree equations of Trivium, with some guessed bits using Groebner basis algorithm. Our analysis shows that although tweaked structure offer more complex equations, still it is unsuitable to provide a security level of 128 bits. We also propose a modified version of the Trivium. The algebraic relations of internal states with output bits formed using our proposed modified version are higher in degrees in comparison with both previous versions. Thus, our proposed version offers increased difficulty of recovering internal state bits by solving algebraic equations and this proves it to be more suitable to provide 128-bit security level.

Online publication date: Thu, 27-Nov-2008

The full text of this article is only available to individual subscribers or to users at subscribing institutions.

 
Existing subscribers:
Go to Inderscience Online Journals to access the Full Text of this article.

Pay per view:
If you are not a subscriber and you just want to read the full contents of this article, buy online access here.

Complimentary Subscribers, Editors or Members of the Editorial Board of the International Journal of Electronic Security and Digital Forensics (IJESDF):
Login with your Inderscience username and password:

    Username:        Password:         

Forgotten your password?


Want to subscribe?
A subscription gives you complete access to all articles in the current issue, as well as to all articles in the previous three years (where applicable). See our Orders page to subscribe.

If you still need assistance, please email subs@inderscience.com