Sciweavers

Free Online Productivity Tools i2Speak i2Symbol i2OCR iTex2Img iWeb2Print iWeb2Shot i2Type iPdf2Split iPdf2Merge i2Bopomofo i2Arabic i2Style i2Image i2PDF iLatex2Rtf Sci2ools

16

EUROCRYPT
2001
Springer

favoriteEmaildiscussreport

112views Cryptology» more EUROCRYPT 2001»

Structural Cryptanalysis of SASAS

13 years 9 months ago

Structural Cryptanalysis of SASAS

Download www.cs.colorado.edu

In this paper we consider the security of block ciphers which contain alternate layers of invertible S-boxes and aﬃne mappings (there are many popular cryptosystems which use this structure, including the winner of the AES competition, Rijndael). We show that a ﬁve layer scheme with 128 bit plaintexts and 8 bit S-boxes is surprisingly weak even when all the S-boxes and aﬃne mappings are key dependent (and thus completely unknown to the attacker). We tested the attack with an actual implementation, which required just 216 chosen plaintexts and a few seconds on a single PC to ﬁnd the 217 bits of information in all the unknown elements of the scheme.

Alex Biryukov, Adi Shamir

Real-time Traffic

128 Bit | Block Ciphers | Cryptology | EUROCRYPT 2001 | ﬁve Layer Scheme |

claim paper

Related Content

» ZeroCorrelation Linear Cryptanalysis of Block Ciphers

» Underground structure monitoring with wireless sensor networks

» Improving Twitter Retrieval by Exploiting Structural Information

» KFC The Krazy Feistel Cipher

» Provable Security for the Skipjacklike Structure against Differential Cryptanalysis and Li...

» SideChannel Analysis of Six SHA3 Candidates

» Korat A Tool for Generating Structurally Complex Test Inputs

» Impossible Boomerang Attack for Block Cipher Structures

» On the cryptanalysis of the hash function Fugue Partitioning and insideout distinguishers

Post Info
More Details (n/a)

Added	28 Jul 2010
Updated	28 Jul 2010
Type	Conference
Year	2001
Where	EUROCRYPT
Authors	Alex Biryukov, Adi Shamir

Comments (0)