Relaxed Differential Fault Analysis of SHA3

In this paper, we propose a new method of differential fault analysis of SHA3 which is based on the differential relations of the algorithm. Employing those differential relations in the fault analysis of SHA3 gives new features to the proposed attacks, e.g., the high probability of fault detection and the possibility of rechecking initial faults and the possibility to recover internal state with 2253 faults. We also present two improvements for the above attack which are using differential relations in reverse direction to improve that attack results and using the algebraic relations of the algorithm to provide a second way to recover the internal state of SHA3. Consequently, we show that with 58 faults on average, SHA3’s internal state can be fully recovered. X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X X