PNB-focused Differential Cryptanalysis of ChaCha Stream Cipher

This study focuses on differential cryptanalysis of the ChaCha stream cipher. In the conventional approach, an adversary first searches for an input/output differential pair with the highest differential bias and then analyzes the probabilistic neutral bits (PNB) based on the obtained input/output differential pair. However, although the time and data complexities for the attack can be estimated by the differential bias and PNB obtained by this approach, the combination of the differential bias and PNB is not always optimal. In addition, the existing studies have not performed a comprehensive analysis of the PNB; thus, they have not provided an upper bound on the number of rounds required for a differential attack that uses a single-bit truncated differential to be successful. To address these limitations, we propose a PNB-focused differential attack on reduced-round ChaCha by first comprehensively analyzing the PNB for all possible single-bit truncated output differences and then searching for the input/output differential pair with the highest differential bias based on the obtained PNB. The best existing attack on ChaCha, proposed by Beierle et al. at CRYPTO 2020, works on up to 7 rounds, whereas the most extended attack we observed works on up to 7.25 rounds using the proposed PNB-focused approach. The time complexity, data complexity, and success probability of the proposed attack are $2^{255.62}$, $2^{48.36}$, and 0.5, respectively. Although the proposed attack is less efficient than a brute force attack, it is the first dedicated attack on the target and provides both a baseline and useful components (i.e., differential bias and PNB) for improved attacks

Increased Urinary 3-Mercaptolactate Excretion and Enhanced Passive Systemic Anaphylaxis in Mice Lacking Mercaptopyruvate Sulfurtransferase, a Model of Mercaptolactate-Cysteine Disulfiduria

Mercaptopyruvate sulfurtransferase (Mpst) and its homolog thiosulfate sulfurtransferase (Tst = rhodanese) detoxify cyanide to thiocyanate. Mpst is attracting attention as one of the four endogenous hydrogen sulfide (H2S)/reactive sulfur species (RSS)-producing enzymes, along with cystathionine β-synthase (Cbs), cystathionine γ-lyase (Cth), and cysteinyl-tRNA synthetase 2 (Cars2). MPST deficiency was found in 1960s among rare hereditary mercaptolactate-cysteine disulfiduria patients. Mpst-knockout (KO) mice with enhanced liver Tst expression were recently generated as its model; however, the physiological roles/significances of Mpst remain largely unknown. Here we generated three independent germ lines of Mpst-KO mice by CRISPR/Cas9 technology, all of which maintained normal hepatic Tst expression/activity. Mpst/Cth-double knockout (DKO) mice were generated via crossbreeding with our previously generated Cth-KO mice. Mpst-KO mice were born at the expected frequency and developed normally like Cth-KO mice, but displayed increased urinary 3-mercaptolactate excretion and enhanced passive systemic anaphylactic responses when compared to wild-type or Cth-KO mice. Mpst/Cth-DKO mice were also born at the expected frequency and developed normally, but excreted slightly more 3-mercaptolactate in urine compared to Mpst-KO or Cth-KO mice. Our Mpst-KO, Cth-KO, and Mpst/Cth-DKO mice, unlike semi-lethal Cbs-KO mice and lethal Cars2-KO mice, are useful tools for analyzing the unknown physiological roles of endogenous H2S/RSS production