Quantum Linearization Attacks

Recent works have shown that quantum period-finding can be used to break many popular constructions (some block ciphers such as Even-Mansour, multiple MACs and AEs...) in the superposition query model. So far, all broken exhibited a strong algebraic structure, which enables craft periodic function of single input block. Recovering secret period allows recover key, distinguish, confidentiality or authenticity these modes.In this paper, we introduce linearization attack, new way using Simon’s algorithm target Specifically, use inputs blocks an interface hiding linear structure. structure perform forgeries.We also present some variants attack other algorithms, are much less common symmetric cryptanalysis: Deutsch’s, Bernstein-Vazirani’s, Shor’s. To best our knowledge, is first time algorithms been forgery key-recovery attacks.Our breaks parallelizable LightMac, PMAC, numerous with (classical) beyond-birthday-bound security (LightMAC+, PMAC+) tweakable (ZMAC). More generally, it shows constructing quantum-secure PRFs might challenging task.