Experimentally Obtained Differential-Linear Distinguishers for Permutations of ASCON and DryGASCON

2023-01-01
DryGASCON and Ascon are two similar authenticated encryption algorithms submitted to NIST’s recently finalized lightweight cryptography competition. DryGASCON was eliminated after the second round, while Ascon won the competition and became the new lightweight cryptography standard. We analyze these two ciphers using differential-linear distinguishers to better understand their security. By using the parallel computing power of GPUs, we show that better distinguishers can be obtained experimentally in practice which cannot be obtained theoretically by known methods. We offer the best experimentally obtained 5-round differential-linear distinguishers for the permutations of Ascon and DryGASCON. We also provide related-key differential-linear attacks on 5-round Ascon.
Citation Formats
A. B. Civek and C. Tezcan, Experimentally Obtained Differential-Linear Distinguishers for Permutations of ASCON and DryGASCON. 2023.