Cryptanalysis of skipjack reduced to 31 rounds using impossible differentials
Traditional differential cryptanalysis makes use of differentials with relatively high probabilities to distinguish correct decryption keys from the wrong ones. Particularly, frequent appearance of the difference predicted by the differential indicates that correct key was used while less frequent occurence of the difference suggests that the key used for decryption was a wrong one. In the paper a new variant of differential cryptanalysis is presented. The key idea is to make use of so called impossible differentials, i.e. differentials that predict that particular differences should not occur. Using such an idea a sieving attack can be launched which finds correct keys by eliminating those trial keys that certainly are not the correct ones. In the paper cryptanalysis of reduced Skipjack using impossible differentials is described. After a short introduction to the key ideas of differential cryptanalysis and impossible differentials the paper continues with brief description of Skipjack cipher. In the next section an impossible differential for 24 rounds of Skipjack is described. In particular, only 24 rounds starting from round 5 and ending at round 28 of the full 32-round Skipjack are considered here. Then a simple attack on a 25-round variant of Skipjack from round 5 to round 29 is described. Also it is outlined how essentially the same attack can be used against a 26-round variant from round 4 to round 29. In section 5 the main attack applied against Skipjack reduced to 31 rounds is described. Again, 24-round impossible differential is used here. First, the variant consisting of the first 31 rounds of Skipjack is analyzed followed by an analysis of the variant consisting of the last 31 rounds of Skipjack. Results are briefly discussed in the last section where also possible modifications of the ideas presented in the paper are mentioned. Finally, in the Appendix an automated technique for finding all the impossible differentials based on the global structure of the cipher is described. Using this approach the authors have found that the longest impossible differential based on the global structure of Skipjack has 24 rounds. For the entire collection see [Zbl 0912.00038].
- Zero-correlation attacks: statistical models independent of the number of approximations
- Multiple (truncated) differential cryptanalysis: explicit upper bounds on data complexity
- Variants of the AES key schedule for better truncated differential bounds
- Differential attacks: using alternative operations
- sLiSCP: Simeck-based permutations for lightweight sponge cryptographic primitives
- Making the impossible possible
- Generalized Feistel networks revisited
- Analysis of 3-line generalized Feistel networks with double SD-functions
- Nonlinear invariant attack: practical attack on full SCREAM, iSCREAM, and Midori64
- New representations of the AES key schedule
- \textsc{Ciminion}: symmetric encryption based on Toffoli-gates over large finite fields
- On the (im)possibility of improving the round diffusion of generalized Feistel structures
- SAND: an AND-RX Feistel lightweight block cipher supporting S-box-based security evaluations
- On a generalization of substitution-permutation networks: the HADES design strategy
- Differential-ML distinguisher: machine learning based generic extension for differential cryptanalysis
- Related-tweakey impossible differential attack on reduced-round \texttt{SKINNY-AEAD} M1/M3
- Pholkos -- efficient large-state tweakable block ciphers from the AES round function
- A bit-vector differential model for the modular addition by a constant and its applications to differential and impossible-differential cryptanalysis
- A greater \texttt{GIFT}: strengthening \texttt{GIFT} against statistical cryptanalysis
- The phantom of differential characteristics
- Bounding the length of impossible differentials for SPN block ciphers
- Provable security against impossible differential and zero correlation linear cryptanalysis of some Feistel structures
- More accurate results on the provable security of AES against impossible differential cryptanalysis
- Impossible differential attack on 13-round Camellia-192
- Impossible differential cryptanalysis of advanced encryption standard
- Differential-linear cryptanalysis revisited
- Security analysis of SIMECK block cipher against related-key impossible differential
- Accurate estimates of the data complexity and success probability for various cryptanalyses
- Impossible differential attacks on 13-round CLEFIA-128
- The higher-order meet-in-the-middle attack and its application to the Camellia block cipher
- Linear hulls with correlation zero and linear cryptanalysis of block ciphers
- On computational complexity of impossible differential cryptanalysis
- On probability of success in linear and differential cryptanalysis
- New results on the genetic cryptanalysis of TEA and reduced-round versions of XTEA
- Cryptanalysis of skipjack reduced to 31 rounds using impossible differentials
- Security evaluation of MISTY structure with SPN round function
- Mind the propagation of states. New automatic search tool for impossible differentials and impossible polytopic transitions
- Wide Trail Design Strategy for Binary MixColumns
- The SKINNY Family of Block Ciphers and Its Low-Latency Variant MANTIS
- Automatic search of meet-in-the-middle and impossible differential attacks
- New insights on AES-like SPN ciphers
- Combined Differential and Linear Cryptanalysis of Reduced-Round PRINTcipher
- New insights on impossible differential cryptanalysis
- Improved top-down techniques in differential cryptanalysis
- Cryptanalysis of the full 8.5-round REESSE3+ block cipher
- CUBE cipher: a family of quasi-involutive block ciphers easy to mask
- Nonlinear invariant attack. Practical attack on full SCREAM, iSCREAM, and Midori64
- Simpira v2: a family of efficient permutations using the AES round function
- Impossible differentials of SPN ciphers
- SPF: a new family of efficient format-preserving encryption algorithms
- LBlock: a lightweight block cipher
- Advanced differential-style cryptanalysis of the NSA's Skipjack block cipher
- scientific article; zbMATH DE number 2089130 (Why is no real title available?)
- scientific article; zbMATH DE number 2089317 (Why is no real title available?)
- Spectral-linear and spectral-differential methods for generating S-boxes having almost optimal cryptographic parameters
- SEA: A Scalable Encryption Algorithm for Small Embedded Applications
- Password Recovery on Challenge and Response: Impossible Differential Attack on Hash Function
- Capability of evolutionary cryptosystems against differential cryptanalysis
- Impossible Differential Cryptanalysis of CLEFIA
- An Improved Impossible Differential Attack on MISTY1
- Provable Security against Impossible Differential Cryptanalysis Application to CS-Cipher
- Improved Impossible Differential Cryptanalysis of Reduced-Round Camellia
- Initial observations on skipjack: Cryptanalysis of Skipjack-3XOR
- scientific article; zbMATH DE number 1951608 (Why is no real title available?)
- Obstacle numbers of planar graphs
- Experimental evaluation of book drawing algorithms
- Integrals Go Statistical: Cryptanalysis of Full Skipjack Variants
- Note on impossible differential attacks
- AKF: a key alternating Feistel scheme for lightweight cipher designs
- Miss in the middle attacks on IDEA and Khufu
- Truncated differentials and skipjack
- Impossible differential cryptanalysis of reduced-round \texttt{SKINNY}
- Impossible differential attack on reduced round SPARX-64/128
- Impossible differential cryptanalysis of reduced-round tweakable TWINE
- eSPF: A Family of Format-Preserving Encryption Algorithms Using MDS Matrices
- Dual Relationship Between Impossible Differentials and Zero Correlation Linear Hulls of SIMON-Like Ciphers
- Out of Non-linearity: Search Impossible Differentials by the Bitwise Characteristic Matrix
- Impossible differential cryptanalysis and integral cryptanalysis of the ACE-class permutation
- Improving impossible-differential attacks against Rijndael-160 and Rijndael-224
- Antiderivative functions over \(\mathbb{F}_{2^n}\)
- On impossible truncated differentials of XSL ciphers
- scientific article; zbMATH DE number 7310182 (Why is no real title available?)
- Bounds for the number of rounds with impossible differences in generalized Feistel schemes
- New impossible differential search tool from design and cryptanalysis aspects. Revealing structural properties of several ciphers
- Cryptanalysis of Reduced Versions of the HIGHT Block Cipher from CHES 2006
- New Results on Impossible Differential Cryptanalysis of Reduced AES
- The (related-key) impossible boomerang attack and its application to the AES block cipher
- Related-Key Differential-Linear Attacks on Reduced AES-192
- Improving the Efficiency of Impossible Differential Cryptanalysis of Reduced Camellia and MISTY1
- New Impossible Differential Attacks on AES
- A new structural-differential property of 5-round AES
- On the structure of Skipjack
- Structural evaluation of AES-like ciphers against mixture differential cryptanalysis
- Finding the impossible: automated search for full impossible-differential, zero-correlation, and integral attacks
- Truncated differential properties of the diagonal set of inputs for 5-round AES
- Modeling large S-box in MILP and a (related-key) differential attack on full round PIPO-64/128
- New automatic search tool for searching for impossible differentials using undisturbed bits
- Differential cryptanalysis of round-reduced \texttt{SPEEDY} family
- Mind the \texttt{TWEAKEY} schedule: cryptanalysis on \texttt{SKINNYe-64-256}
- Cryptanalysis of symmetric primitives over rings and a key recovery attack on \textsf{Rubato}
This page was built for publication: Cryptanalysis of skipjack reduced to 31 rounds using impossible differentials
Report a bug (only for logged in users!)Click here to report a bug for this page (MaRDI item Q4250749)
