to reach a success probability of 50%, you have to 2^64 / N
values in your tables. N is the number of known 64 bit keystream segments
and thus the number of lookups you can do in your tables.
Assuming N = 128, our goal is 2^57 values.
Since a bit more than 2^57 is needed to weigh out the collisions and
N is a conservative choice, the real values will be only known when
test data is processed and we will then refine our estimate.

On Tue, Dec 01, 2009 at 06:41:39PM +0330, p q wrote:
> in different messages the success probability of this attack has been
> discussed , as its 50% . i couldnt collect all the info together and fully
> understand it
> would you please gather these info in one place and explain why would you
> believe the success rate is 50% ?
> thanks

> _______________________________________________
> A51 mailing list
> [email protected]
> http://lists.lists.reflextor.com/cgi-bin/mailman/listinfo/a51

_______________________________________________
A51 mailing list
[email protected]
http://lists.lists.reflextor.com/cgi-bin/mailman/listinfo/a51

Reply via email to