Improved impossible differential cryptanalysis of large-block Rijndael

Liu, Ya; Shi, Yifan; Gu, Dawu; Dai, Bo; Zhao, Fang; Li, Wei; Liu, Zhiqiang; Zeng, Zhiqiang

doi:10.1007/s11432-017-9365-4

Cited by 8 publications

(6 citation statements)

References 13 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Thus, the LEX cipher was discarded from the eSTREAM project [19]. In addition, recent improved attacks can be seen in [20].…”

Section: Related Workmentioning

confidence: 99%

“…To optimize the DES block cipher, the authors in [20] introduced the DESL cipher. They aimed to improve the nonlinear property in the DES cipher and showed that the DESL cipher needs 20% fewer GEs.…”

Section: Related Workmentioning

confidence: 99%

“…(The operations described above and depicted in Figures 2-4 make use of these data structures.) 1,3,4,5,6,9,12,13,16,19,20,21,22,25,28,37,38,41,42,45,46…”

Section: Internal State Driversmentioning

confidence: 99%

See 2 more Smart Citations

MICKEY 2.0.85: A Secure and Lighter MICKEY 2.0 Cipher Variant with Improved Power Consumption for Smaller Devices in the IoT

Alamer

Soh

Brumbaugh³

2019

Symmetry

View full text Add to dashboard Cite

Lightweight stream ciphers have attracted significant attention in the last two decades due to their security implementations in small devices with limited hardware. With low-power computation abilities, these devices consume less power, thus reducing costs. New directions in ultra-lightweight cryptosystem design include optimizing lightweight cryptosystems to work with a low number of gate equivalents (GEs); without affecting security, these designs consume less power via scaled-down versions of the Mutual Irregular Clocking KEYstream generator—version 2-(MICKEY 2.0) cipher. This study aims to obtain a scaled-down version of the MICKEY 2.0 cipher by modifying its internal state design via reducing shift registers and modifying the controlling bit positions to assure the ciphers’ pseudo-randomness. We measured these changes using the National Institutes of Standards and Testing (NIST) test suites, investigating the speed and power consumption of the proposed scaled-down version named MICKEY 2.0.85. The (85) refers to the new modified bit-lengths of each MICKEY 2.0 register. The results show that it is faster, requires less power, and needs fewer GEs. The proposed variant will enhance the security of applications, such asRadio-frequency identification (RFID) technology, sensor networks, and in Internet of things (IoT) in general. It also will enhance research on the optimization of existing lightweight cryptosystems.

show abstract

“…Thus, the LEX cipher was discarded from the eSTREAM project [19]. In addition, recent improved attacks can be seen in [20].…”

Section: Related Workmentioning

confidence: 99%

Section: Related Workmentioning

confidence: 99%

See 1 more Smart Citation

MICKEY 2.0.85: A Secure and Lighter MICKEY 2.0 Cipher Variant with Improved Power Consumption for Smaller Devices in the IoT

Alamer

Soh

Brumbaugh³

2019

Symmetry

View full text Add to dashboard Cite

show abstract

“…In the journal of SCIENCE China 2019, Liu et al. [35] gave improved attacks on 9/10‐round Rijndael‐224 and 10‐round Rijndael‐256.…”

Section: Introductionmentioning

confidence: 99%

“…At TCIST 2017, Cui et al [34] gave the first attack on 9-round Rijndael-192 and improved attacks on 9/10-round Rijndael-224. In the journal of SCIENCE China 2019, Liu et al [35] gave improved attacks on 9/10-round Rijndael-224 and 10-round Rijndael-256.…”

Section: Introductionmentioning

confidence: 99%

New attacks against reduced Rijndael‐160

Dong

Wei

2021

IET Information Security

View full text Add to dashboard Cite

The first 9-round meet-in-the-middle (MITM) attack and improved 8-round impossible differential (ID) attacks on Rijndael-160 are studied here. For the first 9-round MITM attack, a new effective attack path is explored by using the generalised δ-set and the generalised multiset, which are based on the property that the difference branch number of MixColumns is 5. With this attack path, a 5-round MITM distinguisher with a technique of the truncated differential characteristic is proposed, and then the attack on 9-round Rijndael-160 is performed. For the improved 8-round ID attacks, to take advantage of the key-schedule weaknesses for Rijndael-160 under key sizes of 160 and 256 bits, some new attack paths are found. With these attack paths, the 5-round IDs are proposed based on the property of MixColumns above, and then the attacks on the 8-round Rijndael-160 under key sizes of 160 and 256 bits are performed. When compared with the currently known attacks, the proposed attacks have lower data, time, and memory complexities. | INTRODUCTIONThe Rijndael block cipher was designed in the late 1990s by Daemen and Rijmen [1]. In the original design of Rijndael, both block and key size can independently range from 128 to 256 bits in steps of 32 bits. The 128-bit block version with key sizes of 128, 192, and 256 bits was selected as the Advanced Encryption Standard (AES) by the NIST. The other versions with block sizes larger than 128 bits are usually called large-block Rijndael.Owing to the importance and popularity of the AES, many cryptanalytic results on its security have been published so far. Two types of work including constructions of distinguishers and key-recovery attacks on round-reduced AES have recently gained more interest in the literature. The goal of the distinguishers is to distinguish the block cipher from random permutations. Previous public results on the AES included 3/4/ 5-round integral distinguishers [2, 3], 4/5-round impossible differential distinguishers [4,5], 3-round truncated differential distinguishers [5,6], 5-round structure differential distinguishers [7], 3/4/5-round yoyo distinguishers [8], 5/6-round exchange attacks [9], weak-key distinguishers [10], and 4/5/6-round expectation-based distinguishers [11]. As far as key-recovery attacks are concerned, two kinds have been considered. One was committed to maximising the number of rounds that can be broken, such as square attacks [2, 12], collision attacks [13], ID attacks [4, 14-16], meet-in-the-middle (MITM) attacks [17-23], and biclique attacks [24]. The other focussed on practical data, time, or memory complexities, such as boomerang attacks [25], integral attacks [3], polytopic attacks [26], subspace trail cryptanalysis [5], structural-differential attacks [7], yoyo tricks [8], MITM attacks [21], and Grassi attacks [27].However, there has been less focus on the security analysis of the large-block Rijndael. At FSE 2000, Ferguson et al. [2] gave partial sum attacks on 7-round Rijndael-192/224/256 and 8round Rijndael-192. At MYCRYPT 2005, ...

show abstract

Software Optimization of Rijndael for Modern x86-64 Platforms

Drucker

Gueron

2022

Advances in Intelligent Systems and Computing

View full text Add to dashboard Cite

Improved impossible differential cryptanalysis of large-block Rijndael

Cited by 8 publications

References 13 publications

MICKEY 2.0.85: A Secure and Lighter MICKEY 2.0 Cipher Variant with Improved Power Consumption for Smaller Devices in the IoT

MICKEY 2.0.85: A Secure and Lighter MICKEY 2.0 Cipher Variant with Improved Power Consumption for Smaller Devices in the IoT

New attacks against reduced Rijndael‐160

Software Optimization of Rijndael for Modern x86-64 Platforms

Contact Info

Product

Resources

About