Unbalanced biclique cryptanalysis of a full round Midori. Issue 5 (1st March 2019)

• Record Type: Journal Article
• Authors: Han, Guoyong; Zhang, Wenying; Xing, Zhaohui; Zhao, Hongluan; Lian, Jian
• Is Part Of: IET communications. Volume 13:Issue 5(2019)
• Page Start: 505
• Page End: 511
• Publication Date: 2019-03-01
• Subjects: computational complexity -- cryptography; Midori128 -- $8\times 16$8×16 unbalanced biclique -- data complexity -- $4\times 8$4×8 unbalanced biclique -- round Midori64/128 -- unbalanced biclique attack -- biclique structure -- MITM attack -- ASIACRYPT 2011 -- key‐recovery attack -- Asiacrypt 2015 -- lightweight block ciphers -- unbalanced biclique cryptanalysis; Telecommunication systems -- Periodicals; Speech processing systems -- Periodicals; 621.38205
• DOI: 10.1049/iet-com.2018.5343
• Languages: English
• ISSNs: 1751-8628

Abstract

Abstract : Midori is a family of lightweight block ciphers presented by Banik et al . at Asiacrypt 2015. Biclique cryptanalysis is a typical key‐recovery attack that is proposed to attack the full AES by Bogdanov et al . in ASIACRYPT 2011. The method can attack a great deal of ciphers utilising the main idea of MITM attack and the basic principle of the biclique structure. In this study, the authors first provide an unbalanced biclique attack on full round Midori with partial matching and precomputation. They demonstrate that full round Midori64/128 are not secure against unbalanced biclique attacks. They construct a five‐round 4 × 8 unbalanced biclique on Midori64, with data complexity of 2 36 and time complexity of 2 126.25 by investigating the simple key schedule and the encryption structure. Furthermore, they present a four‐round 8 × 16 unbalanced biclique on Midori128 with data complexity of 2 72 and computational complexity of 2 126.91 . To the best of authors' knowledge, the result is the best single‐key cryptanalytic result of Midori.