More Balanced Polynomials: Cube Attacks on 810- and 825-Round Trivium with Practical Complexities

ePrint Report: More Balanced Polynomials: Cube Attacks on 810- and 825-Round Trivium with Practical Complexities

haolei, Jiahui He, Kai Hu, Meiqin Wang

The key step of the cube attack is to recover the special polynomial, the superpoly, of the target cipher. In particular, the balanced superpoly, in which there exists at least one secret variable as a single monomial and none of the other monomials contain this variable, can be exploited to reveal one-bit information about the key bits. However, …

attack attacks cipher cube eprint report key recover report special target the key wang