Information Theory Based Evaluation of the RC4 Stream Cipher Outputs

This paper presents a criterion, based on information theory, to measure the amount of average information provided by the sequences of outputs of the RC4 on the internal state. The test statistic used is the sum of the maximum plausible estimates of the entropies [Formula: see text] , corresponding to the probability distributions [Formula: see text] of the sequences of random variables [Formula: see text] and [Formula: see text] , independent, but not identically distributed, where [Formula: see text] are the known values of the outputs, while [Formula: see text] is one of the unknown elements of the internal state of the RC4. It is experimentally demonstrated that the test statistic allows for determining the most vulnerable RC4 outputs, and it is proposed to be used as a vulnerability metric for each RC4 output sequence concerning the iterative probabilistic attack.