Cryptanalysis of SPEED

Authors:
Chris Hall;John Kelsey;Vincent Rijmen;Bruce Schneier;David Wagner
Affiliations:
-;-;-;-;-
Venue:
SAC '98 Proceedings of the Selected Areas in Cryptography
Year:
1998

Citing 6
Cited 0

Chosen-key attacks on a block cipher

Cryptologia
On Weaknesses of Non–surjective Round Functions

Designs, Codes and Cryptography - Special issue: selected areas in cryptography I
Unbalanced Feistel Networks and Block Cipher Design

Proceedings of the Third International Workshop on Fast Software Encryption
Fast Software Encryption: Designing Encryption Algorithms for Optimal Software Speed on the Intel Pentium Processor

FSE '97 Proceedings of the 4th International Workshop on Fast Software Encryption
The SPEED Cipher

FC '97 Proceedings of the First International Conference on Financial Cryptography
Markov ciphers and differential cryptanalysis

EUROCRYPT'91 Proceedings of the 10th annual international conference on Theory and application of cryptographic techniques

Quantified Score

Hi-index	0.00

Visualization

Abstract

The cipher family SPEED (and an associated hashing mode) was recently proposed in Financial Cryptography '97. This paper cryptanalyzes that proposal, in two parts: First, we discuss several troubling potential weaknesses in the cipher. Next, we show how to efficiently break the SPEED hashing mode using differential related-key techniques, and propose a differential attack on 48-round SPEED. These results raise some significant questions about the security of the SPEED design.