Theoretical Cryptanalysis of the Klimov-Shamir Number Generator TF-1

The internal state of the Klimov–Shamir number generator TF-1 consists of four words of size w bits each, whereas its intended strength is 22w. We exploit an asymmetry in its output function to show that the internal state can be recovered after

• Type: Journal
• Year: 2007
• Where: JOC
• Authors: Boaz Tsaban
• Keywords: Intended Strength, Internal State, JOC 2007, Klimov–Shamir Number Generator