IEICE TRANSACTIONS on Fundamentals
New Iterated RC4 Key Correlations and their Application to Plaintext Recovery on WPA-TKIP
Summary :
This paper presents new key correlations of the keystream bytes generated from RC4 and their application to plaintext recovery on WPA-TKIP. We first observe new key correlations between two bytes of the RC4 key pairs and a keystream byte in each round, and provide their proofs. We refer to these correlations as iterated RC4 key correlations since two bytes of the RC4 key pairs are iterated every 16 rounds. We then extend the existing attacks by Isobe et al. at FSE 2013 and AlFardan et al. at USENIX Security 2013, 0and finally propose an efficient attack on WPA-TKIP. We refer to the proposed attack as chosen plaintext recovery attack (CPRA) since it chooses the best approach for each byte from a variety of the existing attacks. In order to recover the first 257 bytes of a plaintext on WPA-TKIP with success probability of at least 90%, CPRA requires approximately 230 ciphertexts, which are approximately half the number of ciphertexts for the existing attack by Paterson et al. at FSE 2014.
- Publication
- IEICE TRANSACTIONS on Fundamentals Vol.E104-A No.1 pp.190-202
- Publication Date
- 2021/01/01
- Publicized
- Online ISSN
- 1745-1337
- DOI
- 10.1587/transfun.2020CIP0006
- Type of Manuscript
- Special Section PAPER (Special Section on Cryptography and Information Security)
- Category
Authors
Ryoma ITO
National Institute of Information and Communications Technology
Atsuko MIYAJI
Osaka University,Japan Advanced Institute of Science and Technology,Japan Science and Technology Agency
Keyword
Latest Issue
Copyrights notice of machine-translated contents
The copyright of the original papers published on this site belongs to IEICE. Unauthorized use of the original or translated papers is prohibited. See IEICE Provisions on Copyright for details.
Cite this
Copy
Ryoma ITO, Atsuko MIYAJI, "New Iterated RC4 Key Correlations and their Application to Plaintext Recovery on WPA-TKIP" in IEICE TRANSACTIONS on Fundamentals,
vol. E104-A, no. 1, pp. 190-202, January 2021, doi: 10.1587/transfun.2020CIP0006.
Abstract: This paper presents new key correlations of the keystream bytes generated from RC4 and their application to plaintext recovery on WPA-TKIP. We first observe new key correlations between two bytes of the RC4 key pairs and a keystream byte in each round, and provide their proofs. We refer to these correlations as iterated RC4 key correlations since two bytes of the RC4 key pairs are iterated every 16 rounds. We then extend the existing attacks by Isobe et al. at FSE 2013 and AlFardan et al. at USENIX Security 2013, 0and finally propose an efficient attack on WPA-TKIP. We refer to the proposed attack as chosen plaintext recovery attack (CPRA) since it chooses the best approach for each byte from a variety of the existing attacks. In order to recover the first 257 bytes of a plaintext on WPA-TKIP with success probability of at least 90%, CPRA requires approximately 230 ciphertexts, which are approximately half the number of ciphertexts for the existing attack by Paterson et al. at FSE 2014.
URL: https://global.ieice.org/en_transactions/fundamentals/10.1587/transfun.2020CIP0006/_p
Copy
@ARTICLE{e104-a_1_190,
author={Ryoma ITO, Atsuko MIYAJI, },
journal={IEICE TRANSACTIONS on Fundamentals},
title={New Iterated RC4 Key Correlations and their Application to Plaintext Recovery on WPA-TKIP},
year={2021},
volume={E104-A},
number={1},
pages={190-202},
abstract={This paper presents new key correlations of the keystream bytes generated from RC4 and their application to plaintext recovery on WPA-TKIP. We first observe new key correlations between two bytes of the RC4 key pairs and a keystream byte in each round, and provide their proofs. We refer to these correlations as iterated RC4 key correlations since two bytes of the RC4 key pairs are iterated every 16 rounds. We then extend the existing attacks by Isobe et al. at FSE 2013 and AlFardan et al. at USENIX Security 2013, 0and finally propose an efficient attack on WPA-TKIP. We refer to the proposed attack as chosen plaintext recovery attack (CPRA) since it chooses the best approach for each byte from a variety of the existing attacks. In order to recover the first 257 bytes of a plaintext on WPA-TKIP with success probability of at least 90%, CPRA requires approximately 230 ciphertexts, which are approximately half the number of ciphertexts for the existing attack by Paterson et al. at FSE 2014.},
keywords={},
doi={10.1587/transfun.2020CIP0006},
ISSN={1745-1337},
month={January},}
Copy
TY - JOUR
TI - New Iterated RC4 Key Correlations and their Application to Plaintext Recovery on WPA-TKIP
T2 - IEICE TRANSACTIONS on Fundamentals
SP - 190
EP - 202
AU - Ryoma ITO
AU - Atsuko MIYAJI
PY - 2021
DO - 10.1587/transfun.2020CIP0006
JO - IEICE TRANSACTIONS on Fundamentals
SN - 1745-1337
VL - E104-A
IS - 1
JA - IEICE TRANSACTIONS on Fundamentals
Y1 - January 2021
AB - This paper presents new key correlations of the keystream bytes generated from RC4 and their application to plaintext recovery on WPA-TKIP. We first observe new key correlations between two bytes of the RC4 key pairs and a keystream byte in each round, and provide their proofs. We refer to these correlations as iterated RC4 key correlations since two bytes of the RC4 key pairs are iterated every 16 rounds. We then extend the existing attacks by Isobe et al. at FSE 2013 and AlFardan et al. at USENIX Security 2013, 0and finally propose an efficient attack on WPA-TKIP. We refer to the proposed attack as chosen plaintext recovery attack (CPRA) since it chooses the best approach for each byte from a variety of the existing attacks. In order to recover the first 257 bytes of a plaintext on WPA-TKIP with success probability of at least 90%, CPRA requires approximately 230 ciphertexts, which are approximately half the number of ciphertexts for the existing attack by Paterson et al. at FSE 2014.
ER -
English
