Research on Forgery Attack on Authentication Encryption Algorithm ACE
Lipeng Chang, Yuechuan Wei, Shuiyu He, Xiaozhong Pan · 2022 IEEE 10th Joint International Information Technology and Artificial Intelligence Conference (ITAIC) · 2022
The ACE authentication encryption algorithm is an algorithm designed by Aagaard et al. and submitted to the international lightweight cryptographic algorithm standardization competition. It has the function of authentication encryption and hash algorithm. It has certain reference and research significance to analyze the security according to the uniqueness of its structure. Taking the ACE-AE-k algorithm as an example, it is the first time to conduct a chosen-plaintext forgery attack from both direct and indirect aspects. By reusing the Nonce twice to forge the plaintext, the time complexity and data complexity can be neglected, which successfully proved the vulnerability of the ACE authentication encryption algorithm in the case of Nonce reuse or misuse. Secondly, this paper proposed an indirect forgery attack scheme, and combined with the optimal differential characteristics obtained by SMT/SAT solution tools, the maximum expected differential characteristics probability of ACE-AE-k is set to 2-253.78336, which is higher than the probability of exhaustive attacks. On the premise of being discovered by a third party, the same authentication tag is generated to achieve the effect of monitoring or tampering, and the forgery attack is successfully realized.