{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,1]],"date-time":"2026-09-01T15:36:49Z","timestamp":1788277009178,"version":"build-2803163510"},"reference-count":37,"publisher":"Oxford University Press (OUP)","issue":"1","license":[{"start":{"date-parts":[[2022,12,8]],"date-time":"2022-12-08T00:00:00Z","timestamp":1670457600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/academic.oup.com\/journals\/pages\/open_access\/funder_policies\/chorus\/standard_publication_model"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2024,1,17]]},"abstract":"<jats:title>Abstract<\/jats:title>\n               <jats:p>To guarantee the security of symmetric key schemes against quantum adversary, developing quantum cryptanalytic techniques becomes a major worldwide challenge in the post-quantum world. In this paper, we present a general framework of classical guess and determine attack on stream ciphers, and then convert it into quantum guess and determine attack. It shows that, for a given stream cipher with a key size of $k$ bits and an internal state size of $n$ bits, if a basic guess and determine attack with a time complexity below $O ( {{{2}^{{3k}\/{2}}}}\/{n} )$ is available, there is a quantum guess and determine attack with multiple data that can recover all $n$ internal state bits of the cipher with complexity below $O ( {{2^{k \/ 2}}} )$. As applications, we present quantum guess and determine attacks on the SNOW-like stream ciphers. The results show that all of SNOW 1.0 with 128-bit key, SNOW 2.0 with 128-bit key and SOSEMANUK are insecure against quantum guess and determine attack. The resource requirements for implementing a quantum guess and determine attack on SNOW 3G are evaluated as a case study. To the best of our knowledge, this is the first time that the general quantum guess and determine attack is formally proposed and applied to the SNOW-like stream ciphers.<\/jats:p>","DOI":"10.1093\/comjnl\/bxac174","type":"journal-article","created":{"date-parts":[[2022,12,8]],"date-time":"2022-12-08T13:04:37Z","timestamp":1670504677000},"page":"292-303","source":"Crossref","is-referenced-by-count":3,"title":["Quantum Guess and Determine Attack on Stream Ciphers"],"prefix":"10.1093","volume":"67","author":[{"given":"Lin","family":"Ding","sequence":"first","affiliation":[{"name":"PLA SSF Information Engineering University , Zhengzhou 450001, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zheng","family":"Wu","sequence":"additional","affiliation":[{"name":"PLA SSF Information Engineering University , Zhengzhou 450001, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Guixian","family":"Zhang","sequence":"additional","affiliation":[{"name":"PLA SSF Information Engineering University , Zhengzhou 450001, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Tairong","family":"Shi","sequence":"additional","affiliation":[{"name":"PLA SSF Information Engineering University , Zhengzhou 450001, China"},{"name":"Institute of Software, Chinese Academy of Sciences , Beijing 100190, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"286","published-online":{"date-parts":[[2022,12,8]]},"reference":[{"key":"2024012011450730000_ref1","doi-asserted-by":"crossref","first-page":"1484","DOI":"10.1137\/S0097539795293172","article-title":"Polynomial-time algorithms for prime factorization and discrete logarithms on a quantum computer","volume":"26","author":"Shor","year":"1997","journal-title":"SIAM J. Comput."},{"key":"2024012011450730000_ref2","first-page":"212","volume-title":"Proc. STOC 1996","author":"Grover","year":"1996"},{"key":"2024012011450730000_ref3","doi-asserted-by":"crossref","first-page":"188\u2013194","DOI":"10.1038\/nature23461","article-title":"Post-quantum cryptography","volume":"549","author":"Bernstein","year":"2017","journal-title":"Nature"},{"key":"2024012011450730000_ref4","doi-asserted-by":"crossref","first-page":"207","DOI":"10.1007\/978-3-662-53008-5_8","volume-title":"Proc. CRYPTO 2016","author":"Kaplan","year":"2016"},{"key":"2024012011450730000_ref5","doi-asserted-by":"crossref","first-page":"1474","DOI":"10.1137\/S0097539796298637","article-title":"On the power of quantum computation","volume":"26","author":"Simon","year":"1997","journal-title":"SIAM J. Comput."},{"key":"2024012011450730000_ref6","first-page":"198","volume-title":"Proc. CT-RSA 2018","author":"Hosoyamada","year":"2018"},{"key":"2024012011450730000_ref7","doi-asserted-by":"crossref","first-page":"71","DOI":"10.46586\/tosc.v2016.i1.71-94","article-title":"(2016) Quantum differential and linear cryptanalysis","volume":"1","author":"Kaplan","year":"2016","journal-title":"IACR Trans. Symm. Cryptogr."},{"key":"2024012011450730000_ref8","first-page":"492","volume-title":"Proc. SAC 2019","author":"Bonnetain","year":"2019"},{"key":"2024012011450730000_ref9","first-page":"211","volume-title":"Proc. ASIACRYPT 2017","author":"Chailloux","year":"2017"},{"key":"2024012011450730000_ref10","first-page":"249","volume-title":"Proc. EUROCRYPT 2020","author":"Hosoyamada","year":"2020"},{"key":"2024012011450730000_ref11","volume-title":"Proc. CRYPTO 2022","author":"Dong","year":"2022"},{"key":"2024012011450730000_ref12","volume-title":"Cryptology ePrint Archive","author":"Bao","year":"2021"},{"key":"2024012011450730000_ref13","volume-title":"Proc. CRYPTO 2022","author":"Schrottenloher","year":"2022"},{"key":"2024012011450730000_ref14","first-page":"37","volume-title":"Proc. SAC 2002","author":"Hawkes","year":"2002"},{"key":"2024012011450730000_ref15","volume-title":"Guess and determine attack on SNOW","author":"Canni\u00e8re","year":"2001"},{"key":"2024012011450730000_ref16","doi-asserted-by":"crossref","first-page":"66","DOI":"10.1049\/iet-ifs.2008.0013","article-title":"Heuristic guess-and-determine attacks on stream ciphers","volume":"3","author":"Ahmadi","year":"2009","journal-title":"IET Inform. Secur."},{"key":"2024012011450730000_ref17","first-page":"146","volume-title":"Proc. ASIACRYPT 2010","author":"Feng","year":"2010"},{"key":"2024012011450730000_ref18","first-page":"111","volume-title":"Proc. FSE 2003","author":"Babbage","year":"2003"},{"key":"2024012011450730000_ref19","doi-asserted-by":"crossref","first-page":"411","DOI":"10.1049\/iet-ifs.2018.5357","article-title":"Improved guess-and-determine attack on TRIVIUM","volume":"13","author":"Jiao","year":"2019","journal-title":"IET Inform. Secur."},{"key":"2024012011450730000_ref20","doi-asserted-by":"crossref","first-page":"484","DOI":"10.1049\/iet-ifs.2017.0553","article-title":"Guess-and-determine attacks on PANAMA-like stream ciphers","volume":"12","author":"Jiao","year":"2018","journal-title":"IET Inform. Secur."},{"key":"2024012011450730000_ref21","doi-asserted-by":"crossref","DOI":"10.1007\/s11432-018-9878-1","article-title":"Improved guess and determine attack on the MASHA stream cipher","volume":"64","author":"Ding","year":"2021","journal-title":"Sci. China Inf. Sci."},{"key":"2024012011450730000_ref22","doi-asserted-by":"crossref","first-page":"1324","DOI":"10.3724\/SP.J.1001.2013.04287","article-title":"Guess and determine attack on SNOW3G and ZUC","volume":"24","author":"Guan","year":"2013","journal-title":"J. Software"},{"key":"2024012011450730000_ref23","doi-asserted-by":"crossref","first-page":"1789","DOI":"10.1093\/comjnl\/bxaa003","article-title":"A guess-and-determine attack on SNOW-V stream cipher","volume":"63","author":"Jiao","year":"2020","journal-title":"Computer J."},{"key":"2024012011450730000_ref24","doi-asserted-by":"crossref","first-page":"54","DOI":"10.46586\/tosc.v2021.i3.54-83","article-title":"Improved guess-and-determine and distinguishing attacks on SNOW-V","volume":"2021","author":"Yang","year":"2021","journal-title":"IACR Trans. Symm. Cryptogr."},{"key":"2024012011450730000_ref25","first-page":"53","article-title":"Quantum amplitude amplification and estimation","volume":"305","author":"Brassard","year":"2002","journal-title":"Quantum Comput. Inform."},{"key":"2024012011450730000_ref26","doi-asserted-by":"crossref","first-page":"179","DOI":"10.1007\/978-3-030-92518-5_9","volume-title":"Proc. INDOCRYPT 2021","author":"Anand","year":"2021"},{"key":"2024012011450730000_ref27","doi-asserted-by":"crossref","first-page":"394","DOI":"10.1007\/s11128-021-03322-7","article-title":"Evaluation of Grover\u2019s algorithm toward quantum cryptanalysis on ChaCha","volume":"20","author":"Bathe","journal-title":"Quantum Inf. Process"},{"key":"2024012011450730000_ref28","volume-title":"SNOW-a new stream cipher","author":"Ekdahl","year":"2000"},{"key":"2024012011450730000_ref29","first-page":"47","volume-title":"Proc. SAC 2002","author":"Ekdahl","year":"2002"},{"key":"2024012011450730000_ref30","volume-title":"SOSEMANUK, a fast software-oriented stream cipher","author":"Berbain","year":"2005"},{"key":"2024012011450730000_ref31","volume-title":"Specification of the 3GPP confidentiality and integrity algorithms UEA2 & UIA2","author":"SAGE","year":"2006"},{"key":"2024012011450730000_ref32","volume-title":"Specification of the 3GPP confidentiality and integrity algorithms 128-EEA3 & 128-EIA3. document 2: ZUC specification. Version 1.6, ETSI\/SAGE","author":"SAGE","year":"2011"},{"key":"2024012011450730000_ref33","volume-title":"The ZUC-256 Stream Cipher","author":"The ZUC design team"},{"key":"2024012011450730000_ref34","first-page":"1","article-title":"(2019) A new SNOW stream cipher called SNOW-V","volume":"3","author":"Ekdahl","year":"2019","journal-title":"IACR Trans. Symm. Cryptol."},{"key":"2024012011450730000_ref35","first-page":"872\u2013890","article-title":"Quantum addition circuits and unbounded fan-out","volume":"10","author":"Takahashi","year":"2010","journal-title":"Quantum Inf. Comput."},{"key":"2024012011450730000_ref36","first-page":"818\u2013830","article-title":"A meet-in-the-middle algorithm for fast synthesis of depth-optimal quantum circuits","volume":"32","author":"Amy","year":"2013","journal-title":"IEEE Trans. Comput.-Aid. Des. Integr. Circut. Syst"},{"key":"2024012011450730000_ref37","first-page":"280\u2013310","volume-title":"Proc. EUROCRYPT 2020","author":"Jaques","year":"2020"}],"container-title":["The Computer Journal"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/academic.oup.com\/comjnl\/article-pdf\/67\/1\/292\/56167574\/bxac174.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/academic.oup.com\/comjnl\/article-pdf\/67\/1\/292\/56167574\/bxac174.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,1,20]],"date-time":"2024-01-20T11:45:24Z","timestamp":1705751124000},"score":1,"resource":{"primary":{"URL":"https:\/\/academic.oup.com\/comjnl\/article\/67\/1\/292\/6880884"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,12,8]]},"references-count":37,"journal-issue":{"issue":"1","published-online":{"date-parts":[[2022,12,8]]},"published-print":{"date-parts":[[2024,1,17]]}},"URL":"https:\/\/doi.org\/10.1093\/comjnl\/bxac174","relation":{},"ISSN":["0010-4620","1460-2067"],"issn-type":[{"value":"0010-4620","type":"print"},{"value":"1460-2067","type":"electronic"}],"subject":[],"published-other":{"date-parts":[[2024,1]]},"published":{"date-parts":[[2022,12,8]]}}}