Improved results on impossible differential cryptanalysis of reduced-round Camellia-192/256

Authors:
Ya Liu;Dawu Gu;Zhiqiang Liu;Wei Li
Affiliations:
Department of Computer Science and Engineering, Shanghai Jiao Tong University, Shanghai, China;Department of Computer Science and Engineering, Shanghai Jiao Tong University, Shanghai, China;Department of Computer Science and Engineering, Shanghai Jiao Tong University, Shanghai, China;School of Computer Science and Technology, Donghua University, Shanghai 201620, China and Shanghai Key Laboratory of Integrate Administration Technologies for Information Security, Shanghai 200240 ...
Venue:
Journal of Systems and Software
Year:
2012

Citing 12
Cited 2

Camellia: A 128-Bit Block Cipher Suitable for Multiple Platforms - Design and Analysis

SAC '00 Proceedings of the 7th Annual International Workshop on Selected Areas in Cryptography
Higher Order Differential Attack of Camellia (II)

SAC '02 Revised Papers from the 9th Annual International Workshop on Selected Areas in Cryptography
Security of Reduced Version of the Block Cipher Camellia against Truncated and Impossible Differential Cryptanalysis

ASIACRYPT '01 Proceedings of the 7th International Conference on the Theory and Application of Cryptology and Information Security: Advances in Cryptology
Impossible differential cryptanalysis of reduced-round ARIA and Camellia

Journal of Computer Science and Technology
New Impossible Differential Attacks on AES

INDOCRYPT '08 Proceedings of the 9th International Conference on Cryptology in India: Progress in Cryptology
An Improved Impossible Differential Attack on MISTY1

ASIACRYPT '08 Proceedings of the 14th International Conference on the Theory and Application of Cryptology and Information Security: Advances in Cryptology
Cryptanalysis of Skipjack reduced to 31 rounds using impossible differentials

EUROCRYPT'99 Proceedings of the 17th international conference on Theory and application of cryptographic techniques
Square like attack on camellia

ICICS'07 Proceedings of the 9th international conference on Information and communications security
New impossible differential attacks of reduced-round Camellia-192 and Camellia-256

ACISP'11 Proceedings of the 16th Australasian conference on Information security and privacy
Improved collision attack on reduced round camellia

CANS'06 Proceedings of the 5th international conference on Cryptology and Network Security
New observation on camellia

SAC'05 Proceedings of the 12th international conference on Selected Areas in Cryptography
New impossible differential cryptanalysis of reduced-round camellia

CANS'11 Proceedings of the 10th international conference on Cryptology and Network Security

New observations on impossible differential cryptanalysis of reduced-round camellia

FSE'12 Proceedings of the 19th international conference on Fast Software Encryption
A unified method for finding impossible differentials of block cipher structures

Information Sciences: an International Journal

Quantified Score

Hi-index	0.00

Visualization

Abstract

As an international standard adopted by ISO/IEC, the block cipher Camellia has been used in various cryptographic applications. In this paper, we reevaluate the security of Camellia against impossible differential cryptanalysis. Specifically, we propose several 7-round impossible differentials with the FL/FL^-^1 layer. Based on one of them, we mount impossible differential attacks on 11-round Camellia-192 and 12-round Camellia-256. The data complexities of our attacks on 11-round Camellia-192 and 12-round Camellia-256 are about 2^1^2^0 chosen plaintexts and 2^1^1^9^.^8 chosen plaintexts, respectively. The corresponding time complexities are approximately 2^1^6^7^.^1 11-round encryptions and 2^2^2^0^.^8^7 12-round encryptions. As far as we know, our attacks are 2^1^6^.^9 times and 2^1^9^.^1^3 times faster than the previously best known ones but have slightly more data.