Skip to Main content Skip to Navigation
Preprints, Working Papers, ...

Higher-order differential properties of Keccak and Luffa

Abstract : In this paper, we identify higher-order differential and zero-sum properties in the full Keccak-f permutation, in the Luffa v1 hash function, and in components of the Luffa v2 algorithm. These structural properties rely on a new bound on the degree of iterated permutations with a nonlinear layer composed of parallel applications of smaller balanced Sboxes. These techniques yield zero-sum partitions of size $2^{1590}$ for the full Keccak-f permutation and several observations on the Luffa hash family. We first show that Luffa v1 applied to one-block messages is a function of 255 variables with degree at most 251. This observation leads to the construction of a higher-order differential distinguisher for the full Luffa v1 hash function, similar to the one presented by Watanabe et al. on a reduced version. We show that similar techniques can be used to find all-zero higher-order differentials in the Luffa v2 compression function, but the additional blank round destroys this property in the hash function.
Document type :
Preprints, Working Papers, ...
Complete list of metadatas

Cited literature [12 references]  Display  Hide  Download

https://hal.inria.fr/inria-00537741
Contributor : Anne Canteaut <>
Submitted on : Friday, November 19, 2010 - 10:23:56 AM
Last modification on : Thursday, March 5, 2020 - 4:56:22 PM
Long-term archiving on: : Sunday, February 20, 2011 - 2:47:52 AM

File

fullversion.pdf
Files produced by the author(s)

Identifiers

  • HAL Id : inria-00537741, version 1

Collections

Citation

Christina Boura, Anne Canteaut, Christophe de Cannière. Higher-order differential properties of Keccak and Luffa. 2010. ⟨inria-00537741⟩

Share

Metrics

Record views

313

Files downloads

324