Differential fault analysis of rabbit

Abstract

Rabbit is a high speed scalable stream cipher with 128-bit key and a 64-bit initialization vector. It has passed all three stages of the ECRYPT stream cipher project and is a member of eSTREAM software portfolio. In this paper, we present a practical fault analysis attack on Rabbit. The fault model in which we analyze the cipher is the one in which the attacker is assumed to be able to fault a random bit of the internal state of the cipher but cannot control the exact location of injected faults. Our attack requires around 128 - 256 faults, precomputed table of size 241.6 bytes and recovers the complete internal state of Rabbit in about 238 steps. © 2009 Springer-Verlag Berlin Heidelberg.