Differential Fault Analysis of ABC
Sen Wang · 2015
In 2002 Klimov and Shamir proposed a new class of nonlinear function called T-functions. Then in 2005, Anashin et al. submitted ABC algorithm to the e STREAM Project. ABC is a software-oriented stream cipher which uses a class of single cycle T-functions as its driving part. According to the attack results of ABC, we can apply fast correlation attack to recover the state of component A under the condition of weak keys. Assuming that the state of component A is already known, we analyze the resistance of components B and C against differential fault attack. Bit based fault model is built to inject single bit faults to the output states of component B in different moments. According to the correct and errorous keystream words, we make use of differential analysis techniques to obtain the relationship of component B in different moments by means of component C. The analysis results show that 5 state equations can be established by 192 errorous keystream words and 160 correct keystream words. After that, an algorithm based on the properties of single cycle T-function is designed to solve the equations bit by bit. At last the correct keystream words are used to select the average 192 candidate solutions obtained by the algorithm. The data complexity recovering component B and C reduces from 2~(17.5) to 2~(8.46), and the computational complexity reduces from 2~(32.84) to 2~(16.32). The result shows that ABC stream cipher is not safe against differential fault analysis.