Square attack on reduced-round Zodiac cipher

Authors:
Wen Ji;Lei Hu
Affiliations:
State Key Laboratory of Information Security, Graduate School of Chinese Academy of Sciences, Beijing, China;State Key Laboratory of Information Security, Graduate School of Chinese Academy of Sciences, Beijing, China
Venue:
ISPEC'08 Proceedings of the 4th international conference on Information security practice and experience
Year:
2008

Citing 8
Cited 1

The Block Cipher Square

FSE '97 Proceedings of the 4th International Workshop on Fast Software Encryption
Impossible Differential Cryptanalysis of Zodiac

FSE '01 Revised Papers from the 8th International Workshop on Fast Software Encryption
Saturation Attacks on Reduced Round Skipjack

FSE '02 Revised Papers from the 9th International Workshop on Fast Software Encryption
Integral Cryptanalysis

FSE '02 Revised Papers from the 9th International Workshop on Fast Software Encryption
The Saturation Attack - A Bait for Twofish

FSE '01 Revised Papers from the 8th International Workshop on Fast Software Encryption
Square Attack on Reduced Camellia Cipher

ICICS '01 Proceedings of the Third International Conference on Information and Communications Security
On the Security of CAMELLIA against the Square Attack

FSE '02 Revised Papers from the 9th International Workshop on Fast Software Encryption
Integral cryptanalysis of reduced FOX block cipher

ICISC'05 Proceedings of the 8th international conference on Information Security and Cryptology

An improved impossible differential cryptanalysis of Zodiac

Journal of Systems and Software

Quantified Score

Hi-index	0.01

Visualization

Abstract

Zodiac is a block cipher with 128-bit blocks and designed for the Korean firm SoftForum in 2000. This paper discusses the security of Zodiac against the Square attack. We first construct two 8-round distinguishers to build a basic Square attack against the reduced 9-round Zodiac with 128-bit keys, and then extend this attack to 12, 13, 14, and 15-round Zodiac, which finds their round keys with the complexities 292.3, 2124.8, 2157.2, and 2189.5, respectively. Moreover, our attack can find the round keys of the full 16-round Zodiac with 256-bit keys with a complexity of 2221.7 which is better than the exhaustive search and in this attack we just need 216.5 chosen plaintexts. This result shows that the Square attack is not only applicable to Square-like ciphers but also to ciphers with Feistel structure once more.