Title: Optimised the differential trail of the authenticated encryption algorithm Tiaoxin-346

Authors: Wenying Zhang; Zhen Xiao; Mengzhu Li

Addresses: School of Information Science and Engineering, Shandong Normal University, Jinan, China ' School of Information Science and Engineering, Shandong Normal University, Jinan, China ' School of Information Science and Engineering, Shandong Normal University, Jinan, China

Abstract: Tiaoxin-346 is a nonce-based authenticated encryption scheme designed by Ivica Nikolić and has been submitted to the CAESAR competition. Tiaoxin-346 uses three parallel structures of T₃, T₄, T₆ as an important part of the algorithm. In this work, we give the differential analysis. The differential trail designed by designer has 30 active S-boxes (a difference goes six times through two AES rounds) and holds with a probability of at most 2⁻¹⁸⁰. On the base of the forgery attack, we add one round after the last round in the original trail and make the inputs to T₃ and T₄ have the same difference. We assume the difference can be controlled. Therefore, there is no difference for the state T₆. The probability of differential trail is 2⁻¹⁷⁴. By the same method, we add one round before the first round. The probability of differential trail is 2⁻¹⁵⁰. Absolutely, the probabilities are much higher than the designer's.

Keywords: Tiaoxin-346; authenticated encryption; competition for authenticated encryption: security; applicability; and robustness; CAESAR; AES.

DOI: 10.1504/IJHPCN.2017.087467

International Journal of High Performance Computing and Networking, 2017 Vol.10 No.6, pp.498 - 504

Received: 17 Aug 2015
Accepted: 21 Oct 2015
Published online: 16 Oct 2017 *

Full-text access for editors Full-text access for subscribers Purchase this article Comment on this article