Improved integral attacks without full codebook. (1st November 2018)

• Record Type: Journal Article
• Authors: Chu, Zhihui; Chen, Huaifeng; Wang, Xiaoyun; Li, Lu; Dong, Xiaoyang; Ding, Yaoling; Hao, Yonglin
• Is Part Of: IET information security. Volume 12:Number 6(2018)
• Page Start: 513
• Page End: 520
• Publication Date: 2018-11-01
• Subjects: cryptography; FL layer -- SPN round function -- key bits -- bit permutation -- forward rounds -- data complexity -- key‐dependent linear function -- key recovery attack -- target bits -- distinguisher -- improved integral attacks; Computer security -- Periodicals; Cryptography -- Periodicals; Computer networks -- Security measures -- Periodicals; Database security -- Periodicals; 005.8
• DOI: 10.1049/iet-ifs.2017.0388
• Languages: English
• ISSNs: 1751-8709

Abstract

Abstract : The integral attack, exploits the balanced property of the output in the distinguisher. Usually, adversaries append some rounds after the distinguisher, guess the corresponding key bits and check whether the target bits are balanced. Few works add rounds before the distinguisher to make the key recovery attack. In the first full‐round attack on MISTY1, Todo adds one FL layer (key‐dependent linear function) before the distinguisher. In this study, the authors extend his method and give a general method, which they can use to extend some rounds (non‐linear) before the distinguisher to attack more rounds with data complexity smaller than the whole space and little extra time consumption. The basic idea is that for different subkeys guessed in the forward rounds, they set different constant values for the input of the distinguisher. Finally, the selected data space is not full. For substitution permutation network (SPN) (Feistel with SPN round function) structures with 4 bit S‐box and bit permutation, they estimate the data complexity when adding one round before the distinguishers for all 4 bit S‐boxes. Using the method, they improve the integral attacks on PRESENT, RECTANGLE, TWINE and LBlock, and their results could cover one more round.