{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,5]],"date-time":"2026-05-05T07:00:05Z","timestamp":1777964405968,"version":"3.51.4"},"reference-count":31,"publisher":"MDPI AG","issue":"6","license":[{"start":{"date-parts":[[2022,5,30]],"date-time":"2022-05-30T00:00:00Z","timestamp":1653868800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"National Natural Science Foundation of China","award":["61602514"],"award-info":[{"award-number":["61602514"]}]},{"name":"National Natural Science Foundation of China","award":["61802437"],"award-info":[{"award-number":["61802437"]}]},{"name":"National Natural Science Foundation of China","award":["61902428"],"award-info":[{"award-number":["61902428"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Symmetry"],"abstract":"<jats:p>Symmetric cryptosystems (i.e., stream ciphers and block ciphers) have always played an important part in securing the various generations of 3GPP (3rd Generation Partnership Project) mobile telephony systems. The SNOW-V stream cipher, published in September 2019, is the most recent member of the well-known SNOW family of ciphers. It is designed to provide confidentiality and integrity for 5G communications. There have been no time-memory-data tradeoff (TMDTO) attacks on the cipher published so far. By combining with the BSW sampling technique, we propose TMDTO attacks on SNOW-V. The results show that the attacker can mount a TMDTO attack, where none of the online time complexity, the memory complexity and the offline time complexity are bigger than 2256, if the keystream sequences generated by the secret key, together with different IVs, are provided to the attacker. Furthermore, we analyze the security of SNOW-V against quantum TMDTO attacks, and the results show that a quantum TMDTO attack offers, strictly, better online time complexity than Grover\u2019s algorithm, when the available memory space is bigger than 2170.67. These results are helpful in evaluating the security of SNOW-V against (quantum) TMDTO attacks.<\/jats:p>","DOI":"10.3390\/sym14061127","type":"journal-article","created":{"date-parts":[[2022,5,31]],"date-time":"2022-05-31T02:30:06Z","timestamp":1653964206000},"page":"1127","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":3,"title":["(Quantum) Time-Memory-Data Tradeoff Attacks on the SNOW-V Stream Cipher"],"prefix":"10.3390","volume":"14","author":[{"given":"Sijia","family":"Li","sequence":"first","affiliation":[{"name":"PLA SSF Information Engineering University, Zhengzhou 450001, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zhiyi","family":"Liao","sequence":"additional","affiliation":[{"name":"PLA SSF Information Engineering University, Zhengzhou 450001, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zhengyang","family":"Wu","sequence":"additional","affiliation":[{"name":"PLA SSF Information Engineering University, Zhengzhou 450001, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zheng","family":"Wu","sequence":"additional","affiliation":[{"name":"PLA SSF Information Engineering University, Zhengzhou 450001, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1482-1750","authenticated-orcid":false,"given":"Lin","family":"Ding","sequence":"additional","affiliation":[{"name":"PLA SSF Information Engineering University, Zhengzhou 450001, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2022,5,30]]},"reference":[{"key":"ref_1","unstructured":"Briceno, M., Goldberg, I., and Wagner, D. (2022, March 12). A Pedagogical Implementation of A5\/1. Available online: http:\/\/www.gsm-security.net\/papers\/a51.shtml."},{"key":"ref_2","unstructured":"(2022, March 12). 3rd Generation Partnership Project, Technical Specification Group Services and System Aspects, 3G Security, Specification of the 3GPP Confidentiality and Integrity Algorithms; Document 2: KASUMI Specification, V.3.1.1. Available online: https:\/\/www.etsi.org\/deliver\/etsi_ts\/135200_135299\/135202\/15.00.00_60\/ts_135202v150000p.pdf."},{"key":"ref_3","unstructured":"SAGE (2022, March 12). Specification of the 3GPP Confidentiality and Integrity Algorithms UEA2 and UIA2. Available online: https:\/\/www.gsma.com\/aboutus\/wp-content\/uploads\/2014\/12\/snow3gspec.pdf."},{"key":"ref_4","unstructured":"ETSI\/SAGE (2022, March 12). Specification of the 3GPP Confidentiality and Integrity Algorithms 128-EEA3 & 128-EIA3. Document 2: ZUC Specification. Available online: https:\/\/www.gsma.com\/aboutus\/wp-content\/uploads\/2014\/12\/eea3eia3zucv16.pdf."},{"key":"ref_5","unstructured":"Ekdahl, P., Johansson, T., Maximov, A., and Yang, J. (2022, March 12). A new SNOW stream cipher called SNOW-V. Cryptology ePrint Archive, Report 2018\/1143. Available online: https:\/\/eprint.iacr.org\/2018\/1143."},{"key":"ref_6","unstructured":"Ekdahl, P., and Johansson, T. (2000, January 13\u201314). SNOW\u2014A new stream cipher. Proceedings of the First Open NESSIE Workshop, Leuven, Belgium. Available online: https:\/\/www.cosic.esat.kuleuven.be\/nessie\/."},{"key":"ref_7","unstructured":"Ekdahl, P., and Johansson, T. (2002, January 15\u201316). A New Version of the Stream Cipher SNOW. Proceedings of the Selected Areas in Cryptography 2002, St. John\u2019s, NL, Canada."},{"key":"ref_8","doi-asserted-by":"crossref","first-page":"1789","DOI":"10.1093\/comjnl\/bxaa003","article-title":"A Guess-And-Determine Attack On SNOW-V Stream Cipher","volume":"63","author":"Jiao","year":"2020","journal-title":"Comput. J."},{"key":"ref_9","doi-asserted-by":"crossref","first-page":"54","DOI":"10.46586\/tosc.v2021.i3.54-83","article-title":"Improved guess-and-determine and distinguishing attacks on SNOW-V","volume":"3","author":"Yang","year":"2021","journal-title":"IACR Trans. Symmetric Cryptol."},{"key":"ref_10","doi-asserted-by":"crossref","first-page":"378","DOI":"10.46586\/tosc.v2021.i1.378-410","article-title":"Resistance of SNOW-V against fast correlation attacks","volume":"1","author":"Gong","year":"2021","journal-title":"IACR Trans. Symmetric Cryptol."},{"key":"ref_11","doi-asserted-by":"crossref","unstructured":"Hoki, J., Isobe, T., Ito, R., Liu, F., and Sakamoto, K. (2021, January 1\u20133). Distinguishing and Key Recovery Attacks on the Reduced-Round SNOW-V. Proceedings of the ACISP 2021, Virtual Event.","DOI":"10.1007\/978-3-030-90567-5_9"},{"key":"ref_12","first-page":"103100","article-title":"Distinguishing and key recovery attacks on the reduced-round SNOW-V and SNOW-Vi","volume":"65","author":"Hoki","year":"2022","journal-title":"J. Inf. Secur. Appl."},{"key":"ref_13","doi-asserted-by":"crossref","unstructured":"Shi, Z., Jin, C., Zhang, J., Cui, T., Ding, L., and Jin, Y. (2022, March 12). A Correlation Attack on Full SNOW-V and SNOW-Vi. Cryptology ePrint Archive, Report 2021\/1047. To Appear in EUROCRYPT 2022. Available online: https:\/\/eprint.iacr.org\/2021\/1047.","DOI":"10.1007\/978-3-031-07082-2_2"},{"key":"ref_14","unstructured":"Zhou, Z., Feng, D., and Zhang, B. (2022, March 12). Efficient and Extensive Search Linear Approximations with High for Precise Correlations of Full SNOW-V. Cryptology ePrint Archive, Report 2021\/1607. Available online: https:\/\/eprint.iacr.org\/2021\/1607."},{"key":"ref_15","doi-asserted-by":"crossref","first-page":"401","DOI":"10.1109\/TIT.1980.1056220","article-title":"A cryptanalytic time-memory trade-off","volume":"26","author":"Hellman","year":"1980","journal-title":"IEEE Trans. Inf. Theory"},{"key":"ref_16","doi-asserted-by":"crossref","unstructured":"Babbage, S. (1995, January 16\u201318). Improved exhaustive search attacks on stream ciphers. Proceedings of the European Convention on Security and Detection, Brighton, UK.","DOI":"10.1049\/cp:19950490"},{"key":"ref_17","doi-asserted-by":"crossref","unstructured":"Goli\u0107, J. (1997, January 11\u201315). Cryptanalysis of alleged A5 stream cipher. Proceedings of the EUROCRYPT 1997, Konstanz, Germany.","DOI":"10.1007\/3-540-69053-0_17"},{"key":"ref_18","doi-asserted-by":"crossref","unstructured":"Biryukov, A., and Shamir, A. (2000, January 3\u20137). Cryptanalytic time\/memory\/data tradeoffs for stream ciphers. Proceedings of the ASIACRYPT 2000, Kyoto, Japan.","DOI":"10.1007\/3-540-44448-3_1"},{"key":"ref_19","doi-asserted-by":"crossref","unstructured":"Hong, J., and Sarkar, P. (2005, January 4\u20138). New Applications of Time Memory Data Tradeoffs. Proceedings of the ASIACRYPT 2005, Chennai, India.","DOI":"10.1007\/11593447_19"},{"key":"ref_20","doi-asserted-by":"crossref","first-page":"133","DOI":"10.1016\/j.ipl.2008.01.011","article-title":"Treatment of the initial value in Time-Memory-Data Trade-off attacks on stream ciphers","volume":"107","author":"Dunkelman","year":"2008","journal-title":"Inf. Process. Lett."},{"key":"ref_21","first-page":"901","article-title":"Quantum lower bound for inverting a permutation with advice","volume":"15","author":"Nayebi","year":"2015","journal-title":"Quantum Inf. Comput."},{"key":"ref_22","doi-asserted-by":"crossref","unstructured":"Grover, L. (1996, January 22\u201324). A Fast Quantum Mechanical Algorithm for Database Search. Proceedings of the STOC 1996, Philadelphia, PA, USA.","DOI":"10.1145\/237814.237866"},{"key":"ref_23","doi-asserted-by":"crossref","unstructured":"Hhan, M., Xagawa, K., and Yamakawa, T. (2019, January 8\u201312). Quantum random oracle model with auxiliary input. Proceedings of the ASIACRYPT 2019, Kobe, Japan.","DOI":"10.1007\/978-3-030-34578-5_21"},{"key":"ref_24","unstructured":"Chung, K., Liao, T., and Qian, L. (2020, January 17\u201319). Lower Bounds for Function Inversion with Quantum Advice. Proceedings of the ITC 2020, Boston, MA, USA."},{"key":"ref_25","doi-asserted-by":"crossref","unstructured":"Chung, K., Guo, S., Liu, Q., and Qian, L. (2020, January 16\u201319). Tight Quantum Time-Space Tradeoffs for Function Inversion. Proceedings of the FOCS 2020, Durham, NC, USA.","DOI":"10.1109\/FOCS46700.2020.00068"},{"key":"ref_26","unstructured":"Dunkelman, O., Keller, N., Ronen, E., and Shamir, A. (2022, March 12). Quantum Time\/Memory\/Data Tradeoff Attacks. Cryptology ePrint Archive: Report 2021\/1561. Available online: https:\/\/eprint.iacr.org\/2021\/1561."},{"key":"ref_27","doi-asserted-by":"crossref","unstructured":"Biryukov, A., Shamir, A., and Wagner, D. (2000, January 10\u201312). Real time cryptanalysis of A5\/1 on a PC. Proceedings of the FSE 2000, New York, NY, USA.","DOI":"10.1007\/3-540-44706-7_1"},{"key":"ref_28","doi-asserted-by":"crossref","unstructured":"Ding, L., Jin, C., Guan, J., and Qi, C. (2014, January 28\u201330). New Treatment of the BSW Sampling and Its Applications to Stream Ciphers. Proceedings of the AFRICACRYPT 2014, Marrakesh, Morocco.","DOI":"10.1007\/978-3-319-06734-6_9"},{"key":"ref_29","doi-asserted-by":"crossref","unstructured":"Hong, J., and Kim, W. (2005, January 10\u201312). TMD-Tradeoff and State Entropy Loss Considerations of Streamcipher MICKEY. Proceedings of the INDOCRYPT 2005, Bangalore, India.","DOI":"10.1007\/11596219_14"},{"key":"ref_30","unstructured":"Bj\u00f8rstad, T. (2022, March 12). Cryptanalysis of Grain using Time\/Memory\/Data Tradeoffs. ECRYPT Stream Cipher Project Report 2008\/012. Available online: http:\/\/www.ecrypt.eu.org\/stream."},{"key":"ref_31","doi-asserted-by":"crossref","unstructured":"Hosoyamada, A., and Sasaki, Y. (2018, January 16\u201320). Cryptanalysis Against Symmetric-Key Schemes with Online Classical Queries and Offline Quantum Computations. Proceedings of the CT-RSA 2018, San Francisco, CA, USA.","DOI":"10.1007\/978-3-319-76953-0_11"}],"container-title":["Symmetry"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/2073-8994\/14\/6\/1127\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,10]],"date-time":"2025-10-10T23:21:52Z","timestamp":1760138512000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/2073-8994\/14\/6\/1127"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,5,30]]},"references-count":31,"journal-issue":{"issue":"6","published-online":{"date-parts":[[2022,6]]}},"alternative-id":["sym14061127"],"URL":"https:\/\/doi.org\/10.3390\/sym14061127","relation":{},"ISSN":["2073-8994"],"issn-type":[{"value":"2073-8994","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022,5,30]]}}}