Skip to Main content Skip to Navigation
New interface
Conference papers

Cryptanalysis Results on Spook: Bringing Full-round Shadow-512 to the Light

Abstract : Spook [BBB + 19] is one of the 32 candidates that has made it to the second round of the NIST Lightweight Cryptography Standardization process, and is particularly interesting since it proposes differential side channel resistance. In this paper, we present practical distinguishers of the full 6-step version of the underlying permutations of Spook, namely Shadow-512 and Shadow-384, solving challenges proposed by the designers on the permutation. We also propose practical forgeries with 4-step Shadow for the S1P mode of operation in the nonce misuse scenario, which is allowed by the CIML2 security game considered by the authors. All the results presented in this paper have been implemented.
Document type :
Conference papers
Complete list of metadata

Cited literature [19 references]  Display  Hide  Download
Contributor : Virginie Lallemand Connect in order to contact the contributor
Submitted on : Tuesday, September 22, 2020 - 9:12:42 AM
Last modification on : Friday, August 5, 2022 - 2:54:52 PM
Long-term archiving on: : Friday, December 4, 2020 - 6:31:13 PM


Files produced by the author(s)



Patrick Derbez, Paul Huynh, Virginie Lallemand, María Naya-Plasencia, Léo Perrin, et al.. Cryptanalysis Results on Spook: Bringing Full-round Shadow-512 to the Light. CRYPTO 2020 - 40th Annual International Cryptology Conference, Aug 2020, Santa Barbara / Virtual, United States. pp.359--388, ⟨10.1007/978-3-030-56877-1_13⟩. ⟨hal-02944908⟩



Record views


Files downloads