Publication: Research - peer-review › Article in proceedings – Annual report year: 2009
We present several attacks on the block cipher C2, which is used for encrypting DVD Audio discs and Secure Digital cards. C2 has a 56 bit key and a secret 8 to 8 bit S-box. We show that if the attacker is allowed to choose the key, the S-box can be recovered in 2^24 C2 encryptions. Attacking the 56 bit key for a known S-box can be done in complexity 2^48. Finally, a C2 implementation with a 8 to 8 bit secret S-box (equivalent to 2048 secret bits) and a 56 bit secret key can be attacked in 2^53.5 C2 encryptions on average.
|Title of host publication||Advances in Cryptology - CRYPTO 2009 : 29th Annual International Cryptology Conference|
|Number of pages||692|
|Place of publication||Belin Heldelberg New York|
|State||Published - 2009|
|City||Santa Barbara, California, USA|
|Period||01/01/2009 → …|
|Citations||Web of Science® Times Cited: No match on DOI|
- block cipher, boomerang attack, key recovery, Cryptomeria, C2, S-box recovery
Loading map data...