PudgyTurtle Mode Resists Bit-Flipping Attacks

Cryptography

article

David A. August¹  Anne C. Smith² 

[1] Department of Anesthesia, Massachusetts General Hospital;Independent Researcher

关键词: error-correcting code;    non-systematic code;    symmetric encryption;    stream cipher;    encryption modes;    malleability;    integrity;   

DOI  :  10.3390/cryptography7020025

学科分类：社会科学、人文和艺术（综合）

来源: mdpi

【 摘 要 】

Cryptosystems employing a synchronous binary-additive stream cipher are susceptible to a generic attack called ’bit-flipping’, in which the ciphertext is modified to decrypt into a fraudulent message. While authenticated encryption and message authentication codes can effectively negate this attack, encryption modes can also provide partial protection against bit-flipping. PudgyTurtle is a stream-cipher mode which uses keystream to encode (via an error-correcting code) and to encipher (via modulo-2 addition). Here, we describe the behavior of this mode during bit-flipping attacks and demonstrate how it creates uncertainty about the number, positions, and identities of decrypted bits that will be affected.

【 授权许可】

CC BY