Distinguishing attack on CSA

Abstract EN

Common Scrambling Algorithm (CSA) has been used to encrypt European cable digital television signals since 1994.

Although the key size of CSA is small, up to now, there haven’t any effective crypto results which can break the algorithm totally.

Based on the idea of slide resynchronization attack, a distinguishing attack which can distinguish the keystream of the stream cipher from a purely random sequence with computational complexity of O (215) is proposed.

According to the distinguishing attack, the 64 bit initial key can be recovered with computational complexity of O (255).