Fast Software Encryption: 7th International Workshop, FSE 2000 New York, NY, USA, April 10–12, 2000 Proceedings

Alex Biryukov, Adi Shamir, David Wagner (auth.), Gerhard Goos, Juris Hartmanis, Jan van Leeuwen, Bruce Schneier (eds.)3540417281, 9783540417286

Since 1993, cryptographic algorithm research has centered around the Fast So- ware Encryption (FSE) workshop. First held at Cambridge University with 30 attendees, it has grown over the years and has achieved worldwide recognition as a premiere conference. It has been held in Belgium, Israel, France, Italy, and, most recently, New York. FSE 2000 was the 7th international workshop, held in the United States for the rst time. Two hundred attendees gathered at the Hilton New York on Sixth Avenue, to hear 21 papers presented over the course of three days: 10{12 April 2000. These proceedings constitute a collection of the papers presented during those days. FSE concerns itself with research on classical encryption algorithms and – lated primitives, such as hash functions. This branch of cryptography has never been more in the public eye. Since 1997, NIST has been shepherding the Adv- ced Encryption Standard (AES) process, trying to select a replacement algorithm for DES. The rst AES conference, held in California the week before Crypto 98, had over 250 attendees. The second conference, held in Rome two days before FSE 99, had just under 200 attendees. The third AES conference was held in conjunction with FSE 2000, during the two days following it, at the same hotel.

---

Table of contents :
Real Time Cryptanalysis of A5/1 on a PC….Pages 1-18
Statistical Analysis of the Alleged RC4 Keystream Generator….Pages 19-30
The Software-Oriented Stream Cipher SSC2….Pages 31-48
Mercy: A Fast Large Block Cipher for Disk Sector Encryption….Pages 49-63
A Statistical Attack on RC6….Pages 64-74
Amplified Boomerang Attacks Against Reduced-Round MARS and Serpent….Pages 75-93
Correlations in RC6 with a Reduced Number of Rounds….Pages 94-108
On the Interpolation Attacks on Block Ciphers….Pages 109-120
Stochastic Cryptanalysis of Crypton….Pages 121-133
Bitslice Ciphers and Power Analysis Attacks….Pages 134-149
Securing the AES Finalists Against Power Analysis Attacks….Pages 150-164
Ciphertext only Reconstruction of Stream Ciphers Based on Combination Generators….Pages 165-180
A Simple Algorithm for Fast Correlation Attacks on Stream Ciphers….Pages 181-195
A Low-Complexity and High-Performance Algorithm for the Fast Correlation Attack….Pages 196-212
Improved Cryptanalysis of Rijndael….Pages 213-230
On the Pseudorandomness of the AES Finalists – RC6 and Serpent….Pages 231-243
Linear Cryptanalysis of Reduced-Round Versions of the SAFER Block Cipher Family….Pages 244-261
A Chosen-Plaintext Linear Attack on DES….Pages 262-272
Provable Security against Differential and Linear Cryptanalysis for the SPN Structure….Pages 273-283
Unforgeable Encryption and Chosen Ciphertext Secure Modes of Operation….Pages 284-299
Efficient Methods for Generating MARS-Like S-Boxes….Pages 300-313