A Real-Time Attack on the GMR-2 Encryption Algorithm in Satellite Phones  

作　　者：Jingmei Liu Linsen Zhao Jingwei Liu 

机构地区：[1]National Key Laboratory of Integrated Service Networks, Xidian University [2]College of Electronic Engineering, Xi'an University of Post & Telecommunications

出　　处：《China Communications》2017年第11期209-217,共9页中国通信（英文版）

基　　金：supported by China Scholarship Council under Grant No.201506965088

摘　　要：In this paper, we present one method to attack on the GMR-2 algorithm used in satellite phone under the chosen-plaintexts. First using the relationship of the rows of the two s-boxes and outputs of the F coordinate, we attack on the GMR-2 algorithm. Then we deduce the happening probability of read-collision, and analyze its mathematical expectation. Finally, combining with the read-collision, we present an improved method to attack on the GMR-2 algorithm. The research results show that the complexity of the improved algorithm is about 220, and the session key Kc can be recovered in about 0.3 seconds. Compared with the available method, our method takes less time than the guess-and-decide attack method which is 700 s.In this paper, we present one method to attack on the GMR-2 algorithm used in satellite phone under the chosen-plaintexts. First using the relationship of the rows of the two s-boxes and outputs of the F coordinate, we attack on the GMR-2 algorithm. Then we deduce the happening probability of read-collision, and analyze its mathematical expectation. Finally, combining with the read-collision, we present an improved method to attack on the GMR-2 algorithm. The research results show that the complexity of the improved algorithm is about 2^20, and the session key Kc can be recovered in about 0.3 seconds. Compared with the available method, our method takes less time than the guess-and-decide attack method which is 700 s.

关 键 词：satellite phones GMR-1 GMR-2 the known plaintext attack read-collision 

分 类 号：TN918.4[电子电信—通信与信息系统] TN927.2[电子电信—信息与通信工程]