密码学报（中英文）2025，Vol.12Issue(2)：283-296,14.DOI:10.13868/j.cnki.jcr.000763
基于SAT的WARP算法的代数攻击
SAT-Based Algebraic Attack on WARP
摘要
Abstract
WARP is a lightweight block cipher proposed by Banik et al.in SAC 2020,which possesses very small hardware cost,and can be used as a lightweight replacement of AES-128.This study proposes an algebraic attack on WARP based on the SAT method.To provide proper SAT model for algebraic attack on WARP,different SAT models are proposed for linear and non-linear operations of WARP,then various preprocessing techniques are used to simplify the SAT model according to the property of the basic SAT model.Furthermore,the influence of weight of key variables,number of p pairs of laintext-ciphertext,and number of exhausted key bits on the efficiency are analyzed in solving the SAT model.As a result,an algebraic attack is presented on 15-round WARP to recover all 128-bit key in about 253.28 seconds when 60 pairs of plaintext-ciphertext with certain difference are used,and 40 key bits are exhausted.关键词
WARP/轻量级分组密码/代数攻击/SATKey words
WARP/lightweight block cipher/algebraic attack/SAT分类
计算机与自动化引用本文复制引用
郝春雨,徐洪..基于SAT的WARP算法的代数攻击[J].密码学报（中英文）,2025,12(2):283-296,14.基金项目
国家自然科学基金(62202494)National Natural Science Foundation of China(62202494) （62202494）
