A Distinguishing Attack of SNOW 2.0 with Linear Masking Method

摘要

SNOW 2.0 was developed by Johansson and Ekdahl in 2002, as a modified version of SNOW 1.0. In this paper we present the application of linear (masking) attack to SNOW 2.0 stream cipher. Our attack requires 2~(225) output words (2~(230) bits) and 2~(225) steps of analysis to distinguish the output of SNOW 2.0 from a truly random bit sequence.