Estimating Resistance against Multidimensional Linear Attacks: An Application on DEAN

2013 ◽  
pp. 246-262 ◽  
Author(s):  
Risto M. Hakala ◽  
Atle Kivelä ◽  
Kaisa Nyberg
Keyword(s):  
Multidimensional Linear

scholarly journals Multidimensional linear distinguishing attacks and Boolean functions

2011 ◽  
Vol 4 (1) ◽  
pp. 47-64 ◽  
Author(s):  
Miia Hermelin ◽  
Kaisa Nyberg
Keyword(s):  
Boolean Functions ◽  
Multidimensional Linear

scholarly journals Multidimensional linear cryptanalysis with key difference invariant bias for block ciphers

Cybersecurity ◽  
2021 ◽  
Vol 4 (1) ◽  
Author(s):  
Wenqin Cao ◽  
Wentao Zhang
Keyword(s):  
Time Complexity ◽  
Block Ciphers ◽  
Linear Cryptanalysis ◽  
Compression Technique ◽  
Key Recovery ◽  
Linear Approximations ◽  
Theoretical Advantage ◽  
Multidimensional Linear ◽  
Multidimensional Linear Cryptanalysis ◽  
Key Recovery Attacks

AbstractFor block ciphers, Bogdanov et al. found that there are some linear approximations satisfying that their biases are deterministically invariant under key difference. This property is called key difference invariant bias. Based on this property, Bogdanov et al. proposed a related-key statistical distinguisher and turned it into key-recovery attacks on LBlock and TWINE-128. In this paper, we propose a new related-key model by combining multidimensional linear cryptanalysis with key difference invariant bias. The main theoretical advantage is that our new model does not depend on statistical independence of linear approximations. We demonstrate our cryptanalysis technique by performing key recovery attacks on LBlock and TWINE-128. By using the relations of the involved round keys to reduce the number of guessed subkey bits. Moreover, the partial-compression technique is used to reduce the time complexity. We can recover the master key of LBlock up to 25 rounds with about 260.4 distinct known plaintexts, 278.85 time complexity and 261 bytes of memory requirements. Our attack can recover the master key of TWINE-128 up to 28 rounds with about 261.5 distinct known plaintexts, 2126.15 time complexity and 261 bytes of memory requirements. The results are the currently best ones on cryptanalysis of LBlock and TWINE-128.

Ray-based methods in multidimensional linear wave conversion

2003 ◽  
Vol 10 (5) ◽  
pp. 2147-2154 ◽  
Author(s):  
Eugene R. Tracy ◽  
Allan N. Kaufman ◽  
Alain J. Brizard
Keyword(s):  
Linear Wave ◽  
Multidimensional Linear ◽  
Wave Conversion
Sign in / Sign up

Export Citation Format

Share Document