Improved zero-correlation and impossible differential cryptanalysis of reduced-round SIMECK block cipher

SKINNY is a family of lightweight tweakable block ciphers designed to have the smallest hardware footprint. In this paper, we present zero-correlation linear approximations and the related-tweakey impossible differential characteristics for different versions of SKINNY .We utilize Mixed Integer Linear Programming (MILP) to search all zero-correlation linear distinguishers for all variants of SKINNY, where the longest distinguisher found reaches 10 rounds. Using a 9-round characteristic, we present 14 and 18-round zero correlation attacks on SKINNY-64-64 and SKINNY- 64-128, respectively. Also, for SKINNY-n-n and SKINNY-n-2n, we construct 13 and 15-round related-tweakey impossible differential characteristics, respectively. Utilizing these characteristics, we propose 23-round related-tweakey impossible differential cryptanalysis by applying the key recovery attack for SKINNY-n-2n and 19-round attack for SKINNY-n-n. To the best of our knowledge, the presented zero-correlation characteristics in this paper are the first attempt to investigate the security of SKINNY against this attack and the results on the related-tweakey impossible differential attack are the best reported ones.

Download Full-text

Impossible Differential Cryptanalysis for Block Cipher Structures

Progress in Cryptology - INDOCRYPT 2003 - Lecture Notes in Computer Science ◽

10.1007/978-3-540-24582-7_6 ◽

2003 ◽

pp. 82-96 ◽

Cited By ~ 40

Author(s):

Jongsung Kim ◽

Seokhie Hong ◽

Jaechul Sung ◽

Sangjin Lee ◽

Jongin Lim ◽

...

Keyword(s):

Block Cipher ◽

Differential Cryptanalysis ◽

Impossible Differential ◽

Impossible Differential Cryptanalysis

Download Full-text

Novel Impossible Differential Cryptanalysis of Zorro Block Cipher

Signal and Data Processing ◽

10.29252/jsdp.16.4.17 ◽

2020 ◽

Vol 16 (4) ◽

pp. 17-26

Author(s):

Hadi Soleimany ◽

Alireza Mehrdad ◽

Saeideh Sadeghi ◽

Farokhlagha Moazemi ◽

◽

...

Keyword(s):

Block Cipher ◽

Differential Cryptanalysis ◽

Impossible Differential ◽

Impossible Differential Cryptanalysis

Download Full-text

Impossible differential cryptanalysis of Piccolo lightweight block cipher

2014 11th International ISC Conference on Information Security and Cryptology ◽

10.1109/iscisc.2014.6994028 ◽

2014 ◽

Cited By ~ 8

Author(s):

Seyyed Arash Azimi ◽

Zahra Ahmadian ◽

Javad Mohajeri ◽

Mohammad Reza Aref

Keyword(s):

Block Cipher ◽

Differential Cryptanalysis ◽

Impossible Differential ◽

Lightweight Block Cipher ◽

Impossible Differential Cryptanalysis

Download Full-text

Improved Impossible Differentials and Zero-Correlation Linear Hulls of New Structure III

Security and Communication Networks ◽

10.1155/2021/6515844 ◽

2021 ◽

Vol 2021 ◽

pp. 1-11

Author(s):

Jun He ◽

Xuan Shen ◽

Guoqiang Liu

Keyword(s):

Block Cipher ◽

Characteristic Matrix ◽

Linear Cryptanalysis ◽

The Core ◽

Round Function ◽

Linear Layer ◽

Zero Correlation ◽

Impossible Differential ◽

Impossible Differentials ◽

Impossible Differential Cryptanalysis

Impossible differential cryptanalysis and zero-correlation linear cryptanalysis are two kinds of most effective tools for evaluating the security of block ciphers. In those attacks, the core step is to construct a distinguisher as long as possible. In this paper, we focus on the security of New Structure III, which is a kind of block cipher structure with excellent resistance against differential and linear attacks. While the best previous result can only exploit one-round linear layer P to construct impossible differential and zero-correlation linear distinguishers, we try to exploit more rounds to find longer distinguishers. Combining the Miss-in-the-Middle strategy and the characteristic matrix method proposed at EUROCRYPT 2016, we could construct 23-round impossible differentials and zero-correlation linear hulls when the linear layer P satisfies some restricted conditions. To our knowledge, both of them are 1 round longer than the best previous works concerning the two cryptanalytical methods. Furthermore, to show the effectiveness of our distinguishers, the linear layer of the round function is specified to the permutation matrix of block cipher SKINNY which was proposed at CRYPTO 2016. Our results indicate that New Structure III has weaker resistance against impossible differential and zero-correlation linear attacks, though it possesses good differential and linear properties.

Download Full-text