Improved distinguisher for Achterbahn-128 stream cipher  

作　　者：Li Shunbo Huang Guangqiu Wang Yan Hui Feifei Peng Jialong 

机构地区：[1]School of Science, Xi'an University of Architecture and Technology, Xi'an 710055, China [2]School of Management, Xi'an University of Architecture and Technology, Xi'an 710055, China

出　　处：《The Journal of China Universities of Posts and Telecommunications》2018年第2期23-27,共5页中国邮电高校学报（英文版）

基　　金：supported by the National Natural Science Foundation of China(11471255,11501438);Scientific Research Foundation of the Education of Department of Shaanxi Province of China(15JK1411);Natural Science and Technology Project of Shaanxi Province of China(2014JQ1027,2015JQ1014,2017JQ6059);Foundation of Xi’an University of Architecture and Technology(RC1338,RC1438,JC1416)

摘　　要：Achterbahn-128 is a stream cipher proposed by Gammel et al. and submitted to the eSTREAM project. Though many attacks have been published, no recovery attack better than Naya-Plasencia＇ s results with 256 bit keystream limitation. Similar approach is shown and found a specific parity check and decimation. Then an improved distinguisher is constructed for Achterbahn-128 to recover the key with only O （255） keystream bit and O （2102） time complexity. Furthermore, this result is much more effective than the former.Achterbahn-128 is a stream cipher proposed by Gammel et al. and submitted to the eSTREAM project. Though many attacks have been published, no recovery attack better than Naya-Plasencia＇ s results with 256 bit keystream limitation. Similar approach is shown and found a specific parity check and decimation. Then an improved distinguisher is constructed for Achterbahn-128 to recover the key with only O （255） keystream bit and O （2102） time complexity. Furthermore, this result is much more effective than the former.

关 键 词：CRYPTANALYSIS stream cipher distinguishing attack Achterbahn parity check 

分 类 号：TN918.1[电子电信—通信与信息系统]