Skip to main content
U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Resistance of Ascon Family against Conditional Cube Attacks in Nonce-Misuse Setting

Published

Author(s)

Donghoon Chang, Deukjo Hong, Jinkeon Kang, Meltem Sonmez Turan

Abstract

Ascon family is one of the finalists of the National Institute of Standards and Technology (NIST) lightweight cryptography standardization process. The family includes three Authenticated Encryption with Associated Data (AEAD) schemes: \ascon-128 (primary), \ascon-128a, and \ascon-80pq. In this paper, we study the resistance of the Ascon family against conditional cube attacks in nonce-misuse setting, and present new state and key recovery attacks. Our attack recovers the full state information and the secret key of \ascon-128a using 7-round Ascon-permutation for the encryption phase, with $2^117}$ data and $2^116.2}$ time. This is the best known attack result for Ascon-128a as far as we know. We also show that the partial state information of Ascon-128 can be recovered with $2^44.8}$ data. Finally, by assuming that the full state information of Ascon-80pq was recovered by Baudrin et al.'s attack, we show that the 160-bit secret key of Ascon-80pq can be recovered with $2^128}$ time. Although our attacks do not invalidate designers' claim, those allow us to understand the security of Ascon in nonce-misuse setting.
Citation
Cryptology ePrint Archive
Volume
2022

Keywords

Ascon, Conditional cube attack, Cryptanalysis, Lightweight cryptography, State recovery, Key recovery

Citation

Chang, D. , Hong, D. , Kang, J. and Sonmez Turan, M. (2022), Resistance of Ascon Family against Conditional Cube Attacks in Nonce-Misuse Setting, Cryptology ePrint Archive, [online], https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=935467, https://ia.cr/2022/1456 (Accessed June 23, 2024)

Issues

If you have any questions about this publication or are having problems accessing it, please contact reflib@nist.gov.

Created October 25, 2022, Updated December 14, 2022