4 ms·
Ok but, in reply to that tweet, one point keccak.team make, which seems valid for non-classified cryptanalysis, is that researchers don't invest time in trying
by projectant 9y ago
Ok but, in reply to that tweet, one point keccak.team make, which seems valid for non-classified cryptanalysis, is that researchers don't invest time in trying to analyse ARX because the propagation of addition makes it too complicated.
One thing I got from that is that ARX designs are less likely to be broken, not because they are necessarily more secure, but because ARX is often less analysed than designs which yield more concise mathematical representations.
- gcp 9y agoI think there's an implication here of "less likely to be broken by public research".
- mfukar 9y agoThat would be getting causality backwards.
- gcp 9y agoI have no idea what you mean.
- SkyMarshal 9y agoExactly, ARX's less analyzed complexity is a potential information asymmetry arbitrage for serious attackers.