A Simpler Model for Recovering Superpoly on Trivium

The cube attack is a powerful cryptanalysis technique against symmetric primitives, especially for stream ciphers. One of the key step in recovering superpoly. division property has been introduced to attacks with aim first identify variables/monomials that are not involved Recently, some improved versions this allowing recovery exact superpoly have developed and applied on various ciphers [13, 15]. In paper, we propose new model recover cipher given cube. We polynomials as directed graph. It happens structure handles monomial cancellations more easily than those based property, leads better timing results. two implementations our model, one MILP CP, which up 10 times faster original property-based from Hao et al. [13], consistently 30 60 prediction-based Hu [15].