Suppose that the adversary is able to recover the key of Trivium cipher. But the associated IV is unknown to him. Will he be able to decrypt the ciphertexts without any complexity?
$\begingroup$
$\endgroup$
2
-
$\begingroup$ I'd study Trivium's security argument and determine if it falls apart in the situation. $\endgroup$– fgrieu ♦Apr 22, 2020 at 7:12
-
$\begingroup$ Trivium uses 80-bit IV which means that an attacker has 80-bit key search space like the total computing power of Bitcoin miners can find the IV. Not that the IV is not meant to be secret. $\endgroup$– kelalakaApr 22, 2020 at 7:59
Add a comment
|