Multiset structural attack on generalized Feistel networks
Summary: In this paper, we present new generic multiset attacks against generalized Feistel networks, by which we can recover all the unknown round functions completely instead of deciding whether an unknown encryption oracle is such network or a random permutation. With one \(r\)-round multiset distinguisher, we can recover the outermost round functions for \(r + 1\)-round block cipher. Next we propose the \textit{dummy-round technique}, which allows us to make a full-round decomposition if the outermost round is recovered. Moreover, the \textit{dummy-round technique} barely increases the complexity of our attack. Using this generic method, we propose attacks on 7-round RC6-like and 7-round CLEFIA-like structures. Our attacks can recover all the secret round functions, requiring only \(O(10 \times 2^{0.7 n})\) time complexity and \(O(5 \times 2^{n / 2})\) chosen plaintexts, where \(n\) indicates the block size of the cipher. For 64-bit ciphers of these two structures, our results will lead to a practical attack.
- Constructing S-boxes for lightweight cryptography with Feistel structure
- Cryptanalysis of Feistel networks with secret round functions
- Cryptographic Schemes Based on the ASASA Structure: Black-Box, White-Box, and Public-Key (Extended Abstract)
- Cube Attacks on Tweakable Black Box Polynomials
- Higher Order Derivatives and Differential Cryptanalysis
- scientific article; zbMATH DE number 1722688 (Why is no real title available?)
- scientific article; zbMATH DE number 5009213 (Why is no real title available?)
- Improved slender-set linear cryptanalysis
- Key-recovery attacks on \(\mathsf {ASASA}\)
- Reverse-engineering the S-Bbox of Streebog, Kuznyechik and Stribobr1
- Security of the AES with a secret S-box
- Slender-set differential cryptanalysis
- Structural cryptanalysis of SASAS
- Structural evaluation by generalized integral property
- The 128-Bit Blockcipher CLEFIA (Extended Abstract)
This page was built for publication: Multiset structural attack on generalized Feistel networks
Report a bug (only for logged in users!)Click here to report a bug for this page (MaRDI item Q2298200)