Header menu link for other important links
X
A Differential Fault Attack on Grain-128a Using MACs
Subhadeep Banik, Maitra Subhamoy,
Published in Springer Berlin Heidelberg
2012
Pages: 111 - 125
Abstract

The 32-bit MAC of Grain-128a is a linear combination of the first 64 and then the alternative keystream bits. In this paper we describe a successful differential fault attack on Grain-128a, in which we recover the Secret Key by observing the correct and faulty MACs of certain chosen messages. The attack works due to certain properties of the Boolean functions and corresponding choices of the taps from the LFSR. We present methods to identify the fault locations and then construct a set of linear equations to obtain the contents of the LFSR and the NFSR. Our attack requires less than 211 fault injections and invocations of less than 212 MAC generation routines.

About the journal
JournalData powered by TypesetSecurity, Privacy, and Applied Cryptography Engineering
PublisherData powered by TypesetSpringer Berlin Heidelberg
Open AccessNo