Abstract

In this paper, we present the analysis of stream ciphers by using deep learning methods to detect and expose their vulnerability. For this, A5/1 and RC4 stream ciphers are chosen as they both are popular and known to have several security vulnerabilities. In this paper, these vulnerabilities are exposed in the form of ‘bias’ detection using the deep learning methodology.

References

• Ross Anderson (17 June 1994). "A5 (Was: HACKING DIGITAL PHONES)".
• J. Golic, “Cryptanalysis of an alleged A5 stream cipher,” Advances in Cryptology. EUROCRYPT97. LNCS, Vol. 1233, 1997, pp. 239-255, Springer-Verlag
• Biryukov, Alex; Adi Shamir; David Wagner. "Real Time Cryptanalysis of A5/1 on a PC". Fast Software Encryption—FSE 2000: 1–18.
• Patrik E., Thomas J. (2002) “Another Attack on A5/1” citeseerx library, pages (284-289)
• Maximov, Alexander; Thomas Johansson; Steve Babbage (2004). "An Improved Correlation Attack on A5/1". Selected Areas in Cryptography 2004: 1–18.
• Barkan, E., Biham, E., and Keller, N., Instant Ciphertext-only Cryptanalysis of GSM Encrypted Communication, Technical Report CS-2006-07, Technion, 2006.
• Goutam Paul, Siddheshwar Rathi, and Subhamoy Maitra. On Non-negligible Bias of the First Output Byte of RC4 towards the First Three Bytes of the Secret Key. Proceedings of the International Workshop on Coding and Cryptography (WCC) 2007, pages 285–294.
• Andrew Roos. A Class of Weak Keys in the RC4 Stream Cipher (1995).
• Itsik Mantin, Adi Shamir (2001). A Practical Attack on Broadcast RC4, FSE 2001. pp. 152–164
• Fluhrer, Scott R.; Mantin, Itsik; Shamir, Adi (2001). "Weaknesses in the Key Scheduling Algorithm of RC4", pp 1 -24.
• Erik Tews, Ralf-Philipp Weinmann, Andrei Pyshkin.” Breaking 104-bit WEP in under a minute”.
• A. Klein, Attacks on the RC4 stream cipher, Designs, Codes and Cryptography (2008) 48:269–286.
• Al Fardan; et al. (8 July 2013). "On the Security of RC4 in TLS and WPA", Information Security Group, Royal Holloway, University of London.
• "On the Security of RC4 in TLS and WPA", Information Security Group, Royal Holloway, University of London, Retrieved 6 September 2013.
• Mathy Vanhoef and Frank Piessens (9 August 2015). "RC4 NOMORE: Numerous Occurrence Monitoring & Recovery Exploit"
• Marc Briceno, Ian Goldberg, and David Wagner (1998-1999), "A pedagogical implementation of A5/1", featured in cryptome.org/jya/a51-pi.htm#PI
• Basu, Riddhipratim; Ganguly, Shirshendu; Maitra, Subhamoy; Paul, Goutam (2008). "A Complete Characterization of the Evolution of RC4 Pseudo Random Generation Algorithm". Journal of Mathematical Cryptology.
• RC4: Test Vectors, https://en.wikipedia.org/wiki/RC4, // last accesed on 22 Jan 2023.
• NIST SP 800-22, A Statistical Test Suite for Random and Pseudorandom Number Generators for Cryptographic Applications, random number generator, hypothesis test, P-value, by NIST Computer Security Division (CSD) (In 2010).