What a lovely hat

Is it made out of tin foil?

Paper 2025/160

The Nonlinear Filter Model of Stream Cipher Redivivus

Claude Carlet, University of Paris
Palash Sarkar, Indian Statistical Institute
Abstract

The nonlinear filter model is an old and well understood approach to the design of secure stream ciphers. Extensive research over several decades has shown how to attack stream ciphers based on this model and has identified the security properties required of the Boolean function used as the filtering function to resist such attacks. This led to the problem of constructing Boolean functions which provide adequate security and at the same time are efficient to implement. Unfortunately, over the last two decades no fully satisfactory solutions to this problem appeared in the literature. The lack of good solutions has effectively led to the nonlinear filter model becoming more or less obsolete. This is a big loss to the cryptographic design toolkit, since the great advantages of the nonlinear filter model are its simplicity, well understood security and the potential to provide low cost solutions for hardware oriented stream ciphers. In this paper, we revive the nonlinear filter model by constructing appropriate Boolean functions which provide required security and are also efficient to implement. We put forward concrete suggestions of stream ciphers which are $\kappa$-bit secure against known types of attacks for $\kappa=80$, 128, 160, 192, 224 and 256. For the 80-bit and the 128-bit security levels, the gate count estimates of our proposals compare quite well to the famous ciphers Trivium and Grain-128a respectively, while for the 256-bit security level, we do not know of any other stream cipher design which has such a low gate count.

Note: 1. Modified the initialisation round function and proved it to be invertible. 2. A number of other minor changes.

Metadata
Available format(s)
PDF
Category
Secret-key cryptography
Publication info
Preprint.
Keywords
Boolean functionstream ciphernonlinearityalgebraic immunityefficient implementation
Contact author(s)
claude carlet @ gmail com
palash @ isical ac in
History
2025-12-22: last of 6 revisions
2025-02-03: received
See all versions
Short URL
https://ia.cr/2025/160
License
Creative Commons Attribution-NonCommercial-ShareAlike
CC BY-NC-SA

BibTeX

@misc{cryptoeprint:2025/160,
      author = {Claude Carlet and Palash Sarkar},
      title = {The Nonlinear Filter Model of Stream Cipher Redivivus},
      howpublished = {Cryptology {ePrint} Archive, Paper 2025/160},
      year = {2025},
      url = {https://eprint.iacr.org/2025/160}
}
Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.