Impossible differential cryptanalysis using matrix method

Jongsung Kim, Seokhie Hong, Jong In Lim

Research output: Contribution to journalArticle

31 Citations (Scopus)

Abstract

The general strategy of impossible differential cryptanalysis is to first find impossible differentials and then exploit them for retrieving subkey material from the outer rounds of block ciphers. Thus, impossible differentials are one of the crucial factors to see how much the underlying block ciphers are resistant to impossible differential cryptanalysis. In this article, we introduce a widely applicable matrix method to find impossible differentials of block cipher structures whose round functions are bijective. Using this method, we find various impossible differentials of known block cipher structures: Nyberg's generalized Feistel network, a generalized CAST256-like structure, a generalized MARS-like structure, a generalized RC6-like structure, Rijndael structures and generalized Skipjack-like structures. We expect that the matrix method developed in this article will be useful for evaluating the security of block ciphers against impossible differential cryptanalysis, especially when one tries to design a block cipher with a secure structure.

Original languageEnglish
Pages (from-to)988-1002
Number of pages15
JournalDiscrete Mathematics
Volume310
Issue number5
DOIs
Publication statusPublished - 2010 Mar 6

    Fingerprint

Keywords

  • Block ciphers
  • Cryptanalysis
  • Feistel
  • Impossible differential cryptanalysis
  • Matrix method
  • Rijndael
  • Skipjack

ASJC Scopus subject areas

  • Discrete Mathematics and Combinatorics
  • Theoretical Computer Science

Cite this