By Topic

Shorter bit sequence is enough to break stream cipher LILI-128

Sign In

Cookies must be enabled to login.After enabling cookies , please use refresh or reload or ctrl+f5 on the browser for the login options.

Formats Non-Member Member
$33 $13
Learn how you can qualify for the best price for this item!
Become an IEEE Member or Subscribe to
IEEE Xplore for exclusive pricing!
close button

puzzle piece

IEEE membership options for an individual and IEEE Xplore subscriptions for an organization offer the most affordable access to essential journal articles, conference papers, standards, eBooks, and eLearning courses.

Learn more about:

IEEE membership

IEEE Xplore subscriptions

5 Author(s)
Y. Tsunoo ; NEC Corp., Kanagawa, Japan ; T. Saito ; M. Shigeri ; H. Kubo
more authors

LILI-128 is the stream cipher proposed as a candidate cipher for the New European Schemes for Signatures, Integrity, and Encryption (NESSIE) Project. Some methods of breaking it more efficiently than an exhaustive search for its secret key have been found already. The authors propose a new method, which uses shorter bit sequence to break LILI-128 successfully. An attack that can be made with less data can be a more practical threat. With only 27 bits of keystream, this method can break LILI-128 successfully. The efficiency of our attack depends on the memory size. For example, with 299.1 computations, our attack breaks LILI-128, if 228.6-bit memory is available.

Published in:

IEEE Transactions on Information Theory  (Volume:51 ,  Issue: 12 )