Unbalanced biclique cryptanalysis of a full round Midori

Han, Guoyong; Zhang, Wenying; Xing, Zhaohui; Zhao, Hongxia; Lian, Jian

doi:10.1049/iet-com.2018.5343

Cited by 3 publications

(2 citation statements)

References 23 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The 128 bits K is divided into 2 96 groups and each group key consists of a 2 8 × 2 24 matrix:{K [i,j] }. Similar to Section 3.2, we construct an 8 × 24 unbalanced biclique structure utilizing K 4 [14,12,10,8] K 1 [8,6,4,2] and K 7 [15,14,13,12,7,6,5,4] K 6 [7,6,5,4] K 3 [15,14,13,12,7,6,5,4] K 2 [15,14,13,12]. The master key K is grouped as follows:…”

Section: Biclique Attack On Gift-128 a Four-round 8 × 24 Unbalanced Biclique On Gift-128 1) Phase 1 Key Partitioningmentioning

confidence: 99%

See 1 more Smart Citation

Unbalanced Biclique Cryptanalysis of Full-Round GIFT

Han

Zhao

2019

IEEE Access

Self Cite

View full text Add to dashboard Cite

GIFT is a family of lightweight block ciphers presented at CHES 2017. Biclique cryptanalysis is proposed to attack the full AES by Bogdanov et al. in ASIACRYPT 2011. The attack can decrease computation complexity using the technology of meet-in-the-middle and reduce data complexity utilising the biclique structure. In this paper, we first provide an unbalanced biclique attack on full round GIFT. The master key has been recovered for the full round GIFT-64 by a 5-round 4 × 16 unbalanced biclique with data complexity of 2 16 and time complexity of 2 122.95 . Furthermore, a 4-round 8 × 24 unbalanced biclique is constructed on GIFT-128 to recover the master key with data complexity of 2 80 and computational complexity of 2 118.38 , respectively. The research results show GIFT algorithm has weak immunity to biclique cryptanalysis.

show abstract

Section: Biclique Attack On Gift-128 a Four-round 8 × 24 Unbalanced Biclique On Gift-128 1) Phase 1 Key Partitioningmentioning

confidence: 99%

“…The widespread analysis methods include differential cryptanalysis [1], [2], linear cryptanalysis, meet-in-the-middle (MITM) [3], division cryptanalysis [4] and biclique attack [5], [6]. Biclique cryptanalysis is a typical key-recovery attack that is proposed to attack the full AES by Bogdanov et al in ASIACRYPT 2011 [7].…”

Section: Introductionmentioning

confidence: 99%