Biclique cryptanalysis of reduced-round piccolo block cipher

  • Authors:
  • Yanfeng Wang;Wenling Wu;Xiaoli Yu

  • Affiliations:
  • State Key Laboratory of Information Security, Institute of Software, Chinese Academy of Sciences, Beijing, P.R. China and Graduate University of Chinese Academy of Sciences, Beijing, P.R. China;State Key Laboratory of Information Security, Institute of Software, Chinese Academy of Sciences, Beijing, P.R. China;State Key Laboratory of Information Security, Institute of Software, Chinese Academy of Sciences, Beijing, P.R. China

  • Venue:
  • ISPEC'12 Proceedings of the 8th international conference on Information Security Practice and Experience
  • Year:
  • 2012

Quantified Score

Hi-index 0.00

Visualization

Abstract

Piccolo is a lightweight block cipher, with a fixed 64-bit block size and variable key length 80- or 128-bit, which was proposed at CHES 2011. The iterative structure of Piccolo is a variant of Generalized Feistel Network. The transformation utilizing different-size-word based permutation improves diffusion property of Piccolo and the simple key schedule algorithm reduces hardware costs. By analyzing the distribution of the subkeys, we present a biclique cryptanalysis of full round Piccolo-80 without postwhitening keys and 28-round Piccolo-128 without prewhitening keys. The attacks are respectively with data complexity of 248 and 224 chosen ciphertexts, and with time complexity of 278.95 and 2126.79 encryptions.