Attacking reduced-round versions of the SMS4 block cipher in the Chinese WAPI standard

  • Authors:
  • Jiqiang Lu

  • Affiliations:
  • Information Security Group, Royal Holloway, University of London, Egham, Surrey, UK

  • Venue:
  • ICICS'07 Proceedings of the 9th international conference on Information and communications security
  • Year:
  • 2007

Quantified Score

Hi-index 0.00

Visualization

Abstract

SMS4 is a 32-round block cipher with a 128-bit block size and a 128-bit user key. It is used in WAPI, the Chinese WLAN national standard. In this paper, we present a rectangle attack on 14-round SMS4, and an impossible differential attack on 16-round SMS4. These are better than any previously known cryptanalytic results on SMS4 in terms of the numbers of attacked rounds.