Impossible differential cryptanalysis of 13-round CLEFIA-128

Authors:
Xuehai Tang;Bing Sun;Ruilin Li;Chao Li
Affiliations:
Department of Mathematics and System Science, Science College of National University of Defense Technology, Changsha, Hunan 410073, PR China;Department of Mathematics and System Science, Science College of National University of Defense Technology, Changsha, Hunan 410073, PR China;Department of Mathematics and System Science, Science College of National University of Defense Technology, Changsha, Hunan 410073, PR China;Department of Mathematics and System Science, Science College of National University of Defense Technology, Changsha, Hunan 410073, PR China and State Key Laboratory of Information Security, Gradu ...
Venue:
Journal of Systems and Software
Year:
2011

Citing 5
Cited 1

Impossible Differential Cryptanalysis of CLEFIA

Fast Software Encryption
Impossible Differential Analysis of Reduced Round CLEFIA

Information Security and Cryptology
Cryptanalysis of Skipjack reduced to 31 rounds using impossible differentials

EUROCRYPT'99 Proceedings of the 17th international conference on Theory and application of cryptographic techniques
Improving the efficiency of impossible differential cryptanalysis of reduced Camellia and MISTY1

CT-RSA'08 Proceedings of the 2008 The Cryptopgraphers' Track at the RSA conference on Topics in cryptology
The 128-bit blockcipher CLEFIA

FSE'07 Proceedings of the 14th international conference on Fast Software Encryption

A unified method for finding impossible differentials of block cipher structures

Information Sciences: an International Journal

Quantified Score

Hi-index	0.00

Visualization

Abstract

Abstract: Block cipher plays an important role in the domain of information security. CLEFIA is a 128-bit block cipher proposed by SONY Corporation in FSE 2007. Using the previous 9-round impossible differentials, the redundancy in the key schedule and the early-abort technique, we present the first successful impossible differential cryptanalysis of 13-round CLEFIA-128 in this paper. The data and time complexities of the attack with the whitening layers are 2^1^1^9^.^4 and 2^1^2^5^.^5^2, respectively. And for the attack without the whitening layers, more relationships among the subkeys can be used, thus the data and time complexities are reduced to 2^1^1^1^.^3 and 2^1^1^7^.^5, respectively. As far as we know, the presented results are the best compared with the previously published cryptanalytic results on reduced-round CLEFIA-128.