A Cipher-Agnostic Neural Training Pipeline with Automated Finding of Good Input Differences

• Published in: IACR Transactions on Symmetric Cryptology Vol. 2023; no. 3; pp. 184 - 212
• Main Authors: Bellini, Emanuele, Gerault, David, Hambitzer, Anna, Rossi, Matteo
• Format: Journal Article
• Language: English
• Published: Ruhr-Universität Bochum 19-09-2023
• Subjects: Block Cipher; Differential Cryptanalysis; Distinguisher; Evaluation Tools; Neural Cryptanalysis; Neural Networks
• ISSN: 2519-173X; 2519-173X
• DOI: 10.46586/tosc.v2023.i3.184-212

Neural cryptanalysis is the study of cryptographic primitives through machine learning techniques. Following Gohr’s seminal paper at CRYPTO 2019, a focus has been placed on improving the accuracy of such distinguishers against specific primitives, using dedicated training schemes, in order to obtain better key recovery attacks based on machine learning. These distinguishers are highly specialized and not trivially applicable to other primitives. In this paper, we focus on the opposite problem: building a generic pipeline for neural cryptanalysis. Our tool is composed of two parts. The first part is an evolutionary algorithm for the search of good input differences for neural distinguishers. The second part is DBitNet, a neural distinguisher architecture agnostic to the structure of the cipher. We show that this fully automated pipeline is competitive with a highly specialized approach, in particular for SPECK32, and SIMON32. We provide new neural distinguishers for several primitives (XTEA, LEA, HIGHT, SIMON128, SPECK128) and improve over the state-of-the-art for PRESENT, KATAN, TEA and GIMLI.