Cryptanalysis of C2

Publication: Research - peer-reviewArticle in proceedings – Annual report year: 2009

View graph of relations

We present several attacks on the block cipher C2, which is used for encrypting DVD Audio discs and Secure Digital cards. C2 has a 56 bit key and a secret 8 to 8 bit S-box. We show that if the attacker is allowed to choose the key, the S-box can be recovered in 2^24 C2 encryptions. Attacking the 56 bit key for a known S-box can be done in complexity 2^48. Finally, a C2 implementation with a 8 to 8 bit secret S-box (equivalent to 2048 secret bits) and a 56 bit secret key can be attacked in 2^53.5 C2 encryptions on average.
Original languageEnglish
Title of host publicationAdvances in Cryptology - CRYPTO 2009 : 29th Annual International Cryptology Conference
EditorsShai Halevi
Number of pages692
Volume5677
Place of publicationBelin Heldelberg New York
PublisherSpringer
Publication date2009
Edition1st
Pages250-266
ISBN (print)978-3-642-03355-1
DOIs
StatePublished

Conference

ConferenceCRYPTO
CitySanta Barbara, California, USA
Period01/01/09 → …
CitationsWeb of Science® Times Cited: No match on DOI

Keywords

  • block cipher, boomerang attack, key recovery, Cryptomeria, C2, S-box recovery
Download as:
Download as PDF
Select render style:
APAAuthorCBEHarvardMLAStandardVancouverShortLong
PDF
Download as HTML
Select render style:
APAAuthorCBEHarvardMLAStandardVancouverShortLong
HTML
Download as Word
Select render style:
APAAuthorCBEHarvardMLAStandardVancouverShortLong
Word

ID: 3941092