1
$\begingroup$

In the link below, the author uses the aes as a basis for his cipher. In his words: The thesis investigates and explores the behavior of the AES algorithm by replacing two of its original modules, namely the S-Box and the Key Schedule, with two other chaos-based modules.

One might ask: will this system at least will inherit the security I the aes? In addition, it is a common theme in chaos-based ciphers take the outlook of the conventional cipher, so what is fundamentally wrong with chaos-based ciphers?

https://repository.kaust.edu.sa/bitstream/handle/10754/292821/Naif_Thesis.pdf

$\endgroup$
6
  • 5
    $\begingroup$ One kind of "proof" proposed in the two linked thesis/articles is that the output (for consecutive inputs, I guess) pass NIST's statistical test. That's an abysmally wrong (yet very common) security argument, and goes a long way to discredit the whole work. $\endgroup$
    – fgrieu
    Aug 27 '21 at 7:38
  • $\begingroup$ @fgrieu I the this is the case for almost all chaos-based systems. However, the article I put in the comments says that the scheme is provable (not just statistical). Is this is the case? $\endgroup$
    – user2357
    Aug 27 '21 at 7:44
  • 2
    $\begingroup$ In that second paper I see claims of mathematically provable security. But no statement of a proposition to prove, or proof. Do you? Make your own opinion about if this paper makes unproven claims. $\endgroup$
    – fgrieu
    Aug 27 '21 at 8:42
  • 1
    $\begingroup$ I understand your reservations, and I know the consensus on this forum. Yet. Chaos = entropy, which leads to cryptography. S-boxes don't have to be that clever as security can be strengthened with additional rounds. Deterministic chaos is a proven and well studied field, both mathematically and electro-mechanically. I believe the dissertation has merit. $\endgroup$
    – Paul Uszak
    Aug 27 '21 at 15:48
  • 2
    $\begingroup$ Chaos is not the same thing as entropy, especially not when it is, in the end, created by deterministic algorithms. Please note that Paul's definition of Chaos and Entropy are at odds with most of the people in this community. That doesn't disqualify the paper in any way and I agree that the paper in the question may well have some merit. $\endgroup$
    – Maarten Bodewes
    Oct 20 '21 at 14:51

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.