Tag Second-preimage Attack against π-cipher

Gaëtan Leurent (1)

1 SECRET - Security, Cryptology and Transmissions

The π-cipher is one of the candidates of the CAESAR competition. One of the advertised features of the π-cipher is tag second-preimage resistance: it should be hard to generate a message with a given tag, even for the legitimate key holder (insider attack). In this note, we show that the generalized birthday attack of Wagner gives a practical tag second-preimage attack against the π-cipher.

Domaines: Cryptographie et sécurité [cs.CR]

Gaëtan Leurent. Tag Second-preimage Attack against π-cipher. 2014. ⟨hal-00966794v2⟩