Sciweavers

CTRSA
2008
Springer

Improving the Efficiency of Impossible Differential Cryptanalysis of Reduced Camellia and MISTY1

13 years 11 months ago
Improving the Efficiency of Impossible Differential Cryptanalysis of Reduced Camellia and MISTY1
Abstract. Camellia and MISTY1 are Feistel block ciphers. In this paper, we observe that, when conducting impossible differential cryptanalysis on Camellia and MISTY1, their round structures allow us to partially determine whether a candidate pair is right by guessing only a small fraction of the unknown required subkey bits of a relevant round at a time, instead of all of them. This reduces the computational complexity of an attack, and may allow us to break more rounds of a cipher. Taking advantage of this main observation, we significantly improve previous impossible differential cryptanalysis on reduced Camellia and MISTY1, obtaining the best published cryptanalytic results against both the ciphers. Key words: Block cipher cryptanalysis, Camellia, MISTY1, Impossible differential cryptanalysis This author as well as his work was supported by a British Chevening / Royal Holloway Scholarship and the European Commission under contract IST-2002-507932 (ECRYPT). This author was supported ...
Jiqiang Lu, Jongsung Kim, Nathan Keller, Orr Dunke
Added 19 Oct 2010
Updated 19 Oct 2010
Type Conference
Year 2008
Where CTRSA
Authors Jiqiang Lu, Jongsung Kim, Nathan Keller, Orr Dunkelman
Comments (0)