Suppose that the adversary is able to recover the key of Trivium cipher. But the associated IV is unknown to him. Will he be able to decrypt the ciphertexts without any complexity?

  • $\begingroup$ I'd study Trivium's security argument and determine if it falls apart in the situation. $\endgroup$
    – fgrieu
    Apr 22 '20 at 7:12
  • $\begingroup$ Trivium uses 80-bit IV which means that an attacker has 80-bit key search space like the total computing power of Bitcoin miners can find the IV. Not that the IV is not meant to be secret. $\endgroup$
    – kelalaka
    Apr 22 '20 at 7:59

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.