Generic attacks on unbalanced Feistel schemes with expanding functions

  • Authors:
  • Jacques Patarin;Valérie Nachef;Côme Berbain

  • Affiliations:
  • Université de Versailles, Versailles Cedex, France;CNRS, UMR and Department of Mathematics, Université de Cergy-Pontoise, Cergy-Pontoise Cedex, France;France Telecom Research and Development, Issy-les-Moulineaux, France

  • Venue:
  • ASIACRYPT'07 Proceedings of the Advances in Crypotology 13th international conference on Theory and application of cryptology and information security
  • Year:
  • 2007

Quantified Score

Hi-index 0.00

Visualization

Abstract

Unbalanced Feistel schemes with expanding functions are used to construct pseudo-random permutations from kn bits to kn bits by using random functions from n bits to (k - 1)n bits. At each round, all the bits except n bits are changed by using a function that depends only on these n bits. Jutla [6] investigated such schemes, which he denotes by Fkd, where d is the number of rounds. In this paper, we describe novel Known Plaintext Attacks (KPA) and Non-Adaptive Chosen Plaintext Attacks (CPA-1) against these schemes. With these attacks we will often be able to improve the results of Jutla.