Suppose that the adversary is able to recover the key of Trivium cipher. But the associated IV is unknown to him. Will he be able to decrypt the ciphertexts without any complexity?

  • $\begingroup$ I'd study Trivium's security argument and determine if it falls apart in the situation. $\endgroup$
    – fgrieu
    Commented Apr 22, 2020 at 7:12
  • $\begingroup$ Trivium uses 80-bit IV which means that an attacker has 80-bit key search space like the total computing power of Bitcoin miners can find the IV. Not that the IV is not meant to be secret. $\endgroup$
    – kelalaka
    Commented Apr 22, 2020 at 7:59


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.