ویراساینس.
سند علمی

Improving the Efficiency of Impossible Differential Cryptanalysis of Reduced Camellia and MISTY1

Jiqiang Lu, Jongsung Kim, Nathan Keller, Orr Dunkelman

چکیده

Camellia and MISTY1 are Feistel block ciphers. In this paper, we observe that, when conducting impossible differential cryptanalysis on Camellia and MISTY1, their round structures allow us to partially determine whether a candidate pair is right by guessing only a small fraction of the unknown required subkey bits of a relevant round at a time, instead of all of them. This reduces the computational complexity of an attack, and may allow us to break more rounds of a cipher. Taking advantage of this main observation, we significantly improve previous impossible differential cryptanalysis on reduced Camellia and MISTY1, obtaining the best published cryptanalytic results against both the ciphers.

اسناد مشابه

  • Improved Multiple Impossible Differential Cryptanalysis of Midori128

    سند علمی۲۰۱۷IEICE TransactionsMohamed Tolba, Ahmed Abdelkhalek, Amr M. Youssef

    Midori128 is a lightweight block cipher proposed at ASIACRYPT 2015 to achieve low energy consumption per bit. Currently, the best published impossible differential attack on Midori128 covers 10 rounds without the pre-whitening key. By exploiting the special structure of the S-box

  • New Observations on Impossible Differential Cryptanalysis of Reduced-Round Camellia

    سند علمی۲۰۱۲FSEYa Liu, Leibo Li, Dawu Gu, Xiaoyun Wang

    Camellia is one of the widely used block ciphers, which has been selected as an international standard by ISO/IEC. In this paper, by exploiting some interesting properties of the key-dependent layer, we improve previous results on impossible differential cryptanalysis of reduced-

  • Improved Results on Impossible Differential Cryptanalysis of Reduced-Round Camellia-192/256

    سند علمی۲۰۱۱IACR Cryptology ePrint ArchiveYa Liu, Dawu Gu, Zhiqiang Liu, Wei Li

    As an international standard adopted by ISO/IEC, the block cipher Camellia has been used in various cryptographic applications. In this paper, we reevaluate the security of Camellia against impossible differential cryptanalysis. Specifically, we propose several 7-round impossible

  • Security of Reduced Version of the Block Cipher Camellia against Truncated and Impossible Differential Cryptanalysis

    سند علمی۲۰۰۱ASIACRYPTMakoto Sugita, Kazukuni Kobara, Hideki Imai

    This paper describes truncated and impossible differential cryptanalysis of the 128-bit block cipher Camellia, which was proposed by NTT and Mitsubishi Electric Corporation. Our work improves on the best known truncated and impossible differential cryptanalysis. As a result, we s

  • Impossible Differential Cryptanalysis of ARIA and Camellia

    سند علمی۲۰۰۶IACR Cryptology ePrint ArchiveWenling Wu, Wentao Zhang, Dengguo Feng

    This paper studies the security of the block ciphers ARIA and Camellia against impossible differential cryptanalysis. Our work improves the best impossible differential cryptanalysis of ARIA and Camellia known so far. The designers of ARIA expected no impossible differentials exi

  • New Results on Impossible Differential Cryptanalysis of Reduced-Round Camellia-128

    سند علمی۲۰۰۹Selected Areas in CryptographyHamid Mala, Mohsen Shakiba, Mohammad Dakhilalian, Ghadamali Bagherikaram

    Camellia, a 128–bit block cipher which has been accepted by ISO/IEC as an international standard, is increasingly being used in many cryptographic applications. In this paper, using the redundancy in the key schedule and accelerating the filtration of wrong pairs, we present a ne