Cryptanalysis of the Atmel Cipher in SecureMemory, CryptoMemory and CryptoRF

  • Alex Biryukov
  • Ilya Kizhvatov
  • Bin Zhang
Conference paper

DOI: 10.1007/978-3-642-21554-4_6

Volume 6715 of the book series Lecture Notes in Computer Science (LNCS)
Cite this paper as:
Biryukov A., Kizhvatov I., Zhang B. (2011) Cryptanalysis of the Atmel Cipher in SecureMemory, CryptoMemory and CryptoRF. In: Lopez J., Tsudik G. (eds) Applied Cryptography and Network Security. ACNS 2011. Lecture Notes in Computer Science, vol 6715. Springer, Berlin, Heidelberg

Abstract

SecureMemory (SM), CryptoMemory (CM) and CryptoRF (CR) are the Atmel chip families with wide applications in practice. They implement a proprietary stream cipher, which we call the Atmel cipher, to provide authenticity, confidentiality and integrity. At CCS’2010, it was shown that given 1 keystream frame, the secret key in SM protected by the simple version of the cipher can be recovered in 239.4 cipher ticks and if 2640 keystream frames are available, the secret key in CM guarded by the more complex version of the cipher can be restored in 258 cipher ticks. In this paper, we show much more efficient and practical attacks on both versions of the Atmel cipher. The idea is to dynamically reconstruct the internal state of the underlying register by exploiting the different diffusion speeds of the different cells. For SM, we can recover the secret key in 229.8 cipher ticks given 1 keystream frame; for CM, we can recover the secret key in 250 cipher ticks with around 24 frames. Practical implementation of the full attack confirms our results.

Keywords

Stream ciphers RFID Frame SecureMemory CryptoMemory 

Preview

Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

Copyright information

© Springer-Verlag Berlin Heidelberg 2011

Authors and Affiliations

  • Alex Biryukov
    • 1
  • Ilya Kizhvatov
    • 1
  • Bin Zhang
    • 1
  1. 1.Faculty of Science, Technology and CommunicationUniversity of LuxembourgLuxembourg