IMPOSSIBLE DIFFERENTIAL CRYPTANALYSIS ON DEOXYS-BC-256

Q: How can I download an article?

To download an article from SID, first log in to the site, search for the article title, and click on the 'Download Article' option.

Q: How can I download an ISI article?

To download an ISI article on SID, enter the keyword or article title in the search bar, view the relevant results, click on the desired article, and select the 'Download Article' option.

Q: How can I access the SID database?

To access the SID database, visit SID.ir, create an account, and log in to access scientific resources.

Q: Is downloading articles from SID free?

Some articles on SID are available for free, while others require payment. Details are specified on the article's page.

MEHRDAD ALIREZA; Moazami Farokhlagha; SOLEYMANI HADI

مرکز اطلاعات علمی Scientific Information Database (SID) - Trusted Source for Research and Academic Resources

Journal Paper

Paper Information

Journal: THE ISC INTERNATIONAL JOURNAL OF INFORMATION SECURITY Year:2018 | Volume:10 | Issue:2 Page(s): 93-105

Download Full-Text

Persian Verion

View:

455

Download:

181

Cites:

Information Journal Paper

Title

IMPOSSIBLE DIFFERENTIAL CRYPTANALYSIS ON DEOXYS-BC-256

Author(s)

MEHRDAD ALIREZA | Moazami Farokhlagha | SOLEYMANI HADI | Issue Writer Certificate

Keywords

CAESAR COMPETITION DEOXYS-BCQ1

IMPOSSIBLE DIFFERENTIAL CRYPTANALYSISQ1

DISTINGUISHERQ1

Abstract

Deoxys is a final-round candidate of the CAESAR competition. Deoxys is built upon an internal tweakable block cipher Deoxys-BC, where in addition to the plaintext and key, it takes an extra non-secret input called a tweak. This paper presents the first IMPOSSIBLE DIFFERENTIAL CRYPTANALYSIS of Deoxys-BC-256 which is used in Deoxys as an internal tweakable block cipher. First, we find a 4.5-round ID characteristic by utilizing a miss-in-the-middle-approach. We then present several cryptanalysis based upon the 4.5 rounds DISTINGUISHER against round-reduced Deoxys-BC-256 in both single-key and related-key settings. Our contributions include impossible differential attacks on up to 8-round Deoxys-BC-256 in the single-key model. Our attack reaches 9 rounds in the related-key related-tweak model which has a slightly higher data complexity than the best previous results obtained by a related-key related-tweak rectangle attack presented at FSE 2018, but requires a lower memory complexity with an equal time complexity.

Cites

No record.

References

No record.

Cite

Related Journal Papers