Nicolas T. Courtois research page


My research: publications, presentations, talks,
reports, courses, slides, + echoes in the press/Internet.

-
Nicolas Courtois:
Faster Attacks on Full GOST.
A short presentation presented at FSE 2012 rump session, available
here.
-
Nicolas T. Courtois, Theodosis Mourouzis and Pho V. Le
Extension of de Weger�s Attack on RSA with Large Public Keys, .
In SECRYPT 2012, 24-27 July, Rome, Italy.
here.
-
Nicolas T. Courtois, Daniel Hulme, Theodosis Mourouzis:
Multiplicative Complexity and Solving Generalized Brent Equations With SAT Solvers.
In COMPUTATION TOOLS 2012,
The Third International Conference on Computational Logics, Algebras, Programming, Tools, and Benchmarking,
July 22-27, 2012 - Nice, France.
Published in: conference, ISBN: 978-1-61208-222-6,
Pages: 22 to 27, Copyright: Copyright (c) IARIA, 2012,
Date: 22 July 2012, full paper vailable
here.
We have received the
Best Paper Award.
-
Nicolas Courtois:
An Improved Differential Attack on Full GOST.
15 March 2012, preprint available
here.
-
Nicolas Courtois:
Algebraic Complexity Reduction
and Cryptanalysis of GOST.
The "master paper" preprint, with a lot of additional material, available
here.
-

Nicolas Courtois: Security
Evaluation of GOST 28147-89 In View Of International Standardisation
In Cryptologia, Volume 36, Issue 1, pp. 2-13, 2012.
Available
here.
An older version of this report
was also presented to the experts of International Standards Organisation (ISO) involved in
the standardisation of GOST through two member countries, and this version is available at:
eprint.iacr.org/2011/211/.
-
Nicolas T. Courtois, Pouyan Sepherdad, Petr Susil and Serge Vaudenay:
ElimLin Algorithm Revisited .
In FSE 2012, Springer. .
-
Nicolas T. Courtois, Daniel Hulme, Theodosis Mourouzis:
Solving Circuit Optimisation Problems in Cryptography and Cryptanalysis.
In SHARCS 2012,
workshop without formal proceedings, 70 participants,
Washington DC, 17-18 March 2012.
On page 179 of the
workshop record.
.
-
Nicolas T. Courtois, Daniel Hulme and Theodosis Mourouzis:
Solving Circuit Optimisation Problems in Cryptography and Cryptanalysis, .
Appears in electronic proceedings of
2nd IMA Conference Mathematics in Defence 2011,
20 October 2011,
Defence Academy of the United Kingdom, Swindon, UK.
The initial short 6-page version is found
at here.
A longer version is available at eprint:
eprint/2011/475/.
-
Nicolas T. Courtois, Gregory V. Bard and Daniel Hulme:
A New General-Purpose Method to Multiply 3x3 Matrices Using Only 23 Multiplications, .
At arxiv.1108.2830.
-
Ravi Jhawar, Philip Inglesant, Martina Angela Sasse, and Nicolas Courtois:
Make Mine a Quadruple:
Strengthening the Security of Graphical One-Time PIN Authentication .
In NSS 2011,
5th International Conference on Network and System Security,
Milan, Italy, September 6-8, 2011.
-

Nicolas Courtois:
Algebraic Complexity Reduction and Weak Keys in GOST .
Preprint.
-

Nicolas Courtois:
Cryptanalysis of Two GOST Variants With 128-bit Keys .
Preprint.
-

Nicolas Courtois, Michal Misztal: Differential
Cryptanalysis of GOST.
Preprint, work in progress.
At
eprint.iacr.org/2011/312/
.
-

Nicolas Courtois, Michal Misztal:
First Differential Attack On Full 32-Round GOST.
Accepted at ICICS'11,
Thirteenth International Conference on Information and Communications Security,
November 23-26, 2011, Beijing, China. Springer LNCS 7043.
.
-
Nicolas Courtois, Michal Misztal: Aggregated
Differentials and Cryptanalysis of PP-1 and GOST. in 11th
Central European Conference on Cryptology, will be held in Debrecen, Hungary,
on June 30 - July 2, 2024.
-

Nicolas Courtois, Theodosis Mourouzis:
Black-Box Collision Attacks on the Compression Function of the GOST Hash
Function Accepted as SHORT paper at the 6th International
Conference on Security and Cryptography SECRYPT 2011, 18-21 July, Seville,
Spain.
-
Nicolas
T. Courtois and Gregory V. Bard Random
Permutation Statistics and An Improved Slide-Determine Attack on KeeLoq
To appear in special volume Quisquater Festschrift Springer LNCS 6805, 2011.
-
Gregory Bard, Nicolas Courtois, Jorge Nakahara Jr, Pouyan Sepehrdad and
Bingsheng Zhang: Algebraic, AIDA/Cube
and Side Channel Analysis of KATAN Family of Block Ciphers.
In Indocrypt 2010, December 12-15, 2010, Hyderabad, India, Springer LNCS.
-

Gregory V. Bard, Shaun V. Ault and Nicolas T. Courtois:
Statistics of Random Permutations
and the Cryptanalysis Of Periodic Block Ciphers .
Accepted and will appear in Cryptologia in 2011.
-
Nicolas
T. Courtois, Keith Jackson and David Ware:
Fault-Algebraic Attacks on Inner Rounds of DES. In
eSmart 2010, European Smart Card Security Conference, 22-24 September 2010,
Sophia Antipolis, French Riviera, with web proceedings (slides
presented available here ).
-
Nicolas T. Courtois, Sean O'Neil and Jean-Jacques Quisquater:
Practical Algebraic Attacks on the Hitag2 Stream Cipher, In 12th
Information Security Conference, ISC 2009, Pisa, Italy 7-9 September 2009,
Springer LNCS 5735, pp. 167-176.
-
Nicolas T. Courtois:
Self-similarity
Attacks on Block Ciphers and Application to KeeLoq, was once
presented at a the International Workshop on Coding and Cryptography
in Norway in May 2009, is present in printed pre-proceedings but was
withdrawn from printed final proceedings.
In special volume Quisquater Festschrift,
LNCS vol. 6805, Springer, 2011, David Naccache editor.
-
Nicolas T. Courtois, Sean O'Neil and Jean-Jacques
Quisquater: Practical Algebraic Attacks
on the Hitag2 Stream Cipher in RFID Transponders. In
eSmart 2009, European Smart Card Security Conference, 22-25 September 2009,
Sophia Antipolis, French Riviera, with proceedings being published as a CD-ROM
(slides
presented).
-




Card-only attacks on MiFare Crypto-1 cipher.
Nicolas T. Courtois: The Dark Side of Security by
Obscurity and Cloning MiFare Classic Rail and Building Passes Anywhere, Anytime
, new attack requires only 300 queries to the card, appears in SECRYPT 2009 -
International Conference on Security and Cryptography: 7-10 July 2009, Milan,
Italy. Also known as "Courtois dark side" attack on MiFare Classic. Here are
the slides).
A version of this paper is available here.
This paper concerns more than 1 billion of smart cards and compromises
very heavily the security of thousands of buildings and several
train/bus/parking payment systems in Europe and elsewhere (allowing for
example unauthorized access to buildings, travel for free, free parking etc.).
Other researchers also found other and
different card-only attacks on MiFare Classic but they are more than 10
times more difficult to handle in terms of online time (more queries to
the card, for example when standing or sitting next to the victim).
The best practical attack currently known on MiFare Classic is actually a combination
of our attack with 300 queries to find the first key (estimated time: 10
seconds with Proxmark3), and the Nested Authentication attack from the Oakland paper
to recover all the other keys (which is extremely fast).
-
Algebraic attacks on MiFare Crypto-1
cipher. At eprint.iacr.org/2008/166/
This work was a bit of disappointment: we could recover the key in 12 seconds
but this automated cryptanalysis, we did not realize how weak this cipher
actually was, and later Dutch researchers
have shown a simpler and better attack that does the job in less than
0.1 seconds (in contrast our attack is more generally applicable and can also
break Hitag2, to appear soon).
-
Nicolas Courtois: Improved Brute
Force Attacks on KeeLoq, In 6th
ESCAR conference - Embedded Security in Cars 2008.
Hotel Hafen Hamburg (Germany), 18-19 November 2008.
-
Nicolas Courtois and Blandine Debraize:
Algebraic Description and Simultaneous Linear Approximations of Addition in
Snow 2.0. , In ICICS 2008, 10th International Conference
on Information and Communications Security, 20 - 22 October, 2008, Birmingham,
UK. Will appear in LNCS, Springer. (slides
presented available here ).
Also was presented at SASC 2008 workshop, Lausanne, Switzerland, 13-14 February
2008.
-
Press report
Zlamany szyfr karty Oyster, on the Internet service of Gazeta Wyborcza,
one of the biggest Polish daily newspapers.
-
C�me Berbain, Olivier Billet, Anne Canteaut, Nicolas Courtois, Henri
Gilbert, Louis Goubin, Aline Gouget, Louis Granboulan, C�dric Lauradoux, Marine
Minier, Thomas Pornin and Herv� Sibert: Sosemanuk
, a Fast Software-Oriented Stream Cipher, In New Stream
Cipher Designs, The eSTREAM Finalists, LNCS 4986, pp.
98-118, Springer, 2008.
-
C�me Berbain, Olivier Billet, Anne Canteaut, Nicolas Courtois,
Blandine Debraize, Henri Gilbert, Louis Goubin, Aline Gouget, Louis Granboulan,
C�dric Lauradoux, Marine Minier, Thomas Pornin and Herv� Sibert:
Decim v2, In New Stream Cipher Designs, The eSTREAM
Finalists, LNCS 4986, pp. 140-151, Springer, 2008.
-
Nicolas Courtois, Gregory V. Bard
and Andrey Bogdanov: Periodic Ciphers with
Small Blocks and Cryptanalysis of KeeLoq , In Tatra
Mountains Mathematic Publications, 41 (2008), pp. 167-188, post-proceedings of
Tatracrypt 2007 conference.
-
Sean O'Neil, Nicolas Courtois: Reverse-engineered
Philips/NXP Hitag2 Cipher, presented at the
rump session of FSE 2008, Lausanne, 12 February 2008. Source
code + nice picture can be found here.
-

Nicolas Courtois, Gregory V. Bard and David Wagner:
Algebraic and Slide Attacks on KeeLoq. This paper
describes 1) the first successful algebraic attack in history on a full round
real-life block cipher 2) the fastest attack ever found on KeeLoq. The
complexity of the latter is about 2^28
KeeLoq encryptions on average, and can be even
2^23 for a fraction of keys (see our
next paper in preparation, not in FSE proceedings). The paper was
presented at Fast Software Encryption 2008, Lausanne, Switzerland, February
10-13, 2008, and appears in LNCS Springer, 2008. And here are the
slides.
See also a VERY OLD version, NOT up-to-date:
eprint/2007/062/.
-
Experimental algebraic cryptanalysis
of block ciphers - web
page.
-
Nicolas Courtois:
New Frontier in Symmetric Cryptanalysis
,
slides from an invited talk by N. Courtois at Indocrypt 2008, 14-17 December 2008,
slides are available
here
-
Slides by Nicolas Courtois:
New Frontiers in Symmetric Cryptanalysis, from the
invited talk given by N. Courtois at
ECRYPT workshop Tools for Cryptanalysis in Krakow, 24-25 September,
full version is
available here.
-
Nicolas Courtois and Blandine Debraize:
Specific S-box Criteria in Algebraic Attacks on Block Ciphers with Several
Known Plaintexts, to appear in Post-Proceedings of
WEWoRC 2007, Western European Workshop on Research in Cryptology,
July 4-6, 2007, Ruhr-University Bochum, Germany.
To appear in Springer LNCS 4945.
-
Full-page magazine article in Polish:
"Jak sie wlamac do samochodu znanej marki za pomoca kryptoanalizy?", in monthly
magazine of academics and students of Military University of Technology,
Warsaw, Poland, Nr 7-9, 136-138, July-September 200, page 12, ISSN 1507-9988.
-
Nicolas Courtois, Gregory V. Bard:
Algebraic Cryptanalysis of the Data Encryption Standard,
In 11-th IMA Conference, Cirencester, UK, 18-20 December 2007, Springer LNCS
4887.
Was also presented at
ECRYPT workshop Tools for Cryptanalysis in Krakow, 24-25 September.
See also eprint.iacr.org/2006/402/.
-
Presentation
New Frontiers in Symmetric Cryptanalysis, from the talk
given by N. Courtois at rump session of Eurocrypt 2007,
available here.
Longer and different version was presented at
ECRYPT workshop Tools for Cryptanalysis and is
available here.
-
Press report: w attacks on KeeLoq that is used to unlock doors and
deactivate the alarm in many cars, see (in Polish)
a report on IPSEC.PL online news service.
-
Another report in Polish:
"Czekasz chwile i wchodzisz do dowolnej limuzyny".
-
Nicolas Courtois, Gregory V. Bard,
Chris Jefferson: Efficient Methods for
Conversion and Solution of Sparse Systems of Low-Degree Multivariate
Polynomials over GF(2) via SAT-Solvers,
eprint/2007/024/ .
Also presented at
ECRYPT workshop Tools for Cryptanalysis in Krakow, 24-25 September. A
working Windows distribution with source code can be found here (it
requires careful manual installation). .