Collision Attacks against AEZ-PRF for Authenticated Encryption AEZ

• 作 者: Tairong Shi Chenhui Jin Jie Guan
• 机 构: Information Science and Technology Institute, Science Avenue, High-Tech Zone, Zhengzhou, Henan 45000
• 出 处: 中国通信（英文版）
• 发表日期: 2018年2期
• 关键词: CAESAR competition authen-ticated encryption AEZ collision attacks quantum attac

AEZ is an AES-based authenticated encryption submitted to the ongoing CAESAR competition and was presented at Eurocrypt 2015 with AEZ v3. There are three models for AEZ, AEZ-core, AEZ-tiny and AEZ-prf. In this paper, we consider the security of AEZ-prf for AEZ v4.2, the latest version of AEZ. Our major finding is a collision of any 256-bit associated data for AES-prf. Then we launch collision attacks in a quantum setting and a classical setting respectively under different assumptions. In the quantum setting, by Si-mon’s quantum algorithm, we amount a forg-ery with O(n) quantum superposition queries and an overwhelming probability close to 1. In the classical setting, one with the key of AEZ-prf can also construct the forgeries. Our results show that the AEZ-prf models of AEZ v4.2 is not secure in both the quantum setting and classical world. Furthermore, our results can also be applied to AEZ v3, which has been published on Eurocrypt 2015. As far as we know, no cryptanalysis of AEZ v4.2 has been published so far.