Header menu link for other important links
X
Settling the mystery of Zr = r in RC4
Published in Springer New York LLC
2019
Volume: 11
   
Issue: 4
Pages: 697 - 715
Abstract
In this paper, using a matrix, at first we revisit the work of Mantin on finding the probability distribution of the RC4 permutation after the completion of the KSA. After that, we extend the same idea to analyse the probabilities during any iteration of the Pseudo Random Generation Algorithm. Next, we study the bias of Zr = r (where Zr is the r-th output keystream byte), which is one of the significant biases observed in the RC4 output keystream. This bias has played an important role in the plaintext recovery attack proposed by Isobe et al. in FSE 2013. However, the accurate theoretical explanation of the bias of Zr = r is still a mystery. Though several attempts have been made to prove this bias, none of those provides an accurate justification. Here, using the results found with the help of the probability transition matrix we justify this bias of Zr = r accurately and settle this issue. The bias obtained from our proof matches the experimental observations perfectly. © 2018, Springer Science+Business Media, LLC, part of Springer Nature.
About the journal
JournalData powered by TypesetCryptography and Communications
PublisherData powered by TypesetSpringer New York LLC
ISSN19362447
Open AccessNo
Concepts (10)
  •  related image
    Iterative methods
  •  related image
    Bias
  •  related image
    CRYPTANALYSIS
  •  related image
    KEYSTREAM
  •  related image
    PLAINTEXT RECOVERY ATTACKS
  •  related image
    PRGA
  •  related image
    PROBABILITY TRANSITION MATRIX
  •  related image
    Pseudo random
  •  related image
    Stream ciphers
  •  related image
    Probability distributions