Cryptanalysis of TWIS Block Cipher

TWIS is a 128-bit lightweight block cipher that is proposed by Ojha et al. In this work, we analyze the security of the cipher against differential, impossible differential and linear attacks. For the differential case, we mount a full-round attack on TWIS and recover 12 bits of the 32-bit final subkey with 2 complexity. For the other cases, we present distinguishers which can be extended to key recovery attacks. Also, we showed that the security of the cipher is only 62 bits instead of claimed 128 bits. Moreover, we introduce some observations that compromise the security of the cipher.