Zero-correlation linear cryptanalysis with FFT and improved attacks on ISO standards Camellia and CLEFIA

Andrey Bogdanov, Huizheng Geng, Meiqin Wang, Long Wen, Baudoin Collard

Research output: Chapter in Book/Report/Conference proceedingArticle in proceedingsResearchpeer-review


Zero-correlation linear cryptanalysis is based on the linear approximations with correlation exactly zero, which essentially generalizes the integral property, and has already been applied to several block ciphers - among others, yielding best known attacks to date on round-reduced TEA and CAST-256 as published in FSE'12 and ASIACRYPT'12, respectively. In this paper, we use the FFT (Fast Fourier Transform) technique to speed up the zero-correlation cryptanalysis. First, this allows us to improve upon the state-of-the-art cryptanalysis for the ISO/IEC standard and CRYPTREC-portfolio cipher Camellia. Namely, we present zero-correlation attacks on 11-round Camellia-128 and 12-round Camellia-192 with FL/FL-1 and whitening key starting from the first round, which is an improvement in the number of attacked rounds in both cases. Moreover, we provide multidimensional zero-correlation cryptanalysis of 14-round CLEFIA-192 and 15-round CLEFIA-256 that are attacks on the highest numbers of rounds in the classical single-key setting, respectively, with improvements in memory complexity. © 2014 Springer-Verlag.
Original languageEnglish
Title of host publicationProceedings of the 20th International Conference on Selected Areas in Cryptography -- SAC 2013
Publication date2014
ISBN (Print)978-3-662-43413-0
ISBN (Electronic)978-3-662-43414-7
Publication statusPublished - 2014
Event20th International Workshop on Selected Areas of Cryptography - Burnaby, Canada
Duration: 14 Aug 201316 Aug 2013
Conference number: 20


Conference20th International Workshop on Selected Areas of Cryptography
SeriesLecture Notes in Computer Science


  • Computer Science (all)
  • Theoretical Computer Science
  • Block cipher
  • Camellia
  • FFT
  • Multidimesional linear cryptanalysis
  • Zero-correlation cryptanalysis
  • Fast Fourier transforms
  • Security of data
  • Block ciphers
  • Linear cryptanalysis
  • Zero correlation
  • Cryptography

Fingerprint Dive into the research topics of 'Zero-correlation linear cryptanalysis with FFT and improved attacks on ISO standards Camellia and CLEFIA'. Together they form a unique fingerprint.

Cite this