Skip to Main content Skip to Navigation
Journal articles

Quantum Period Finding against Symmetric Primitives in Practice

Xavier Bonnetain 1 Samuel Jaques 2 
1 CARAMBA - Cryptology, arithmetic : algebraic methods for better algorithms
Inria Nancy - Grand Est, LORIA - ALGO - Department of Algorithms, Computation, Image and Geometry
Abstract : We present the first complete descriptions of quantum circuits for the offline Simon's algorithm, and estimate their cost to attack the MAC Chaskey, the block cipher PRINCE and the NIST lightweight finalist AEAD scheme Elephant. These attacks require a reasonable amount of qubits, comparable to the number of qubits required to break RSA-2048. They are faster than other collision algorithms, and the attacks against PRINCE and Chaskey are the most efficient known to date. As Elephant has a key smaller than its state size, the algorithm is less efficient and its cost ends up very close to or above the cost of exhaustive search. We also propose an optimized quantum circuit for boolean linear algebra as well as complete reversible implementations of PRINCE, Chaskey, spongent and Keccak which are of independent interest for quantum cryptanalysis. We stress that our attacks could be applied in the future against today's communications, and recommend caution when choosing symmetric constructions for cases where long-term security is expected.
Document type :
Journal articles
Complete list of metadata
Contributor : Xavier Bonnetain Connect in order to contact the contributor
Submitted on : Tuesday, November 16, 2021 - 5:08:08 PM
Last modification on : Friday, July 8, 2022 - 10:08:22 AM
Long-term archiving on: : Thursday, February 17, 2022 - 8:21:07 PM


Files produced by the author(s)




Xavier Bonnetain, Samuel Jaques. Quantum Period Finding against Symmetric Primitives in Practice. IACR Transactions on Cryptographic Hardware and Embedded Systems, IACR, 2021, 2022 (1), pp.1-27. ⟨10.46586/tches.v2022.i1.1-27⟩. ⟨hal-03431518⟩



Record views


Files downloads