Zero-correlation linear cryptanalysis with FFT and improved attacks on ISO standards Camellia and CLEFIA

Andrey Bogdanov; Huizheng Geng; Meiqin Wang; Long Wen; Baudoin Collard

doi:10.1007/978-3-662-43414-7_16

Zero-correlation linear cryptanalysis with FFT and improved attacks on ISO standards Camellia and CLEFIA

Andrey Bogdanov
, Huizheng Geng
, Meiqin Wang
, Long Wen
, Baudoin Collard

Department of Applied Mathematics and Computer Science

Shandong University
Université catholique de Louvain

Research output: Chapter in Book/Report/Conference proceeding › Article in proceedings › Research › peer-review

Abstract

Zero-correlation linear cryptanalysis is based on the linear approximations with correlation exactly zero, which essentially generalizes the integral property, and has already been applied to several block ciphers - among others, yielding best known attacks to date on round-reduced TEA and CAST-256 as published in FSE'12 and ASIACRYPT'12, respectively. In this paper, we use the FFT (Fast Fourier Transform) technique to speed up the zero-correlation cryptanalysis. First, this allows us to improve upon the state-of-the-art cryptanalysis for the ISO/IEC standard and CRYPTREC-portfolio cipher Camellia. Namely, we present zero-correlation attacks on 11-round Camellia-128 and 12-round Camellia-192 with FL/FL^-1and whitening key starting from the first round, which is an improvement in the number of attacked rounds in both cases. Moreover, we provide multidimensional zero-correlation cryptanalysis of 14-round CLEFIA-192 and 15-round CLEFIA-256 that are attacks on the highest numbers of rounds in the classical single-key setting, respectively, with improvements in memory complexity. © 2014 Springer-Verlag.

Original language	English
Title of host publication	Proceedings of the 20th International Conference on Selected Areas in Cryptography -- SAC 2013
Publisher	Springer
Publication date	2014
Pages	306-323
ISBN (Print)	978-3-662-43413-0
ISBN (Electronic)	978-3-662-43414-7
DOIs	https://doi.org/10.1007/978-3-662-43414-7_16
Publication status	Published - 2014
Event	20th International Workshop on Selected Areas of Cryptography - Burnaby, Canada Duration: 14 Aug 2013 → 16 Aug 2013 Conference number: 20

Conference

Conference	20th International Workshop on Selected Areas of Cryptography
Number	20
Country/Territory	Canada
City	Burnaby
Period	14/08/2013 → 16/08/2013

Series	Lecture Notes in Computer Science
Volume	8282
ISSN	0302-9743

Keywords

Computer Science (all)
Theoretical Computer Science
Block cipher
Camellia
CLEFIA
FFT
Multidimesional linear cryptanalysis
Zero-correlation cryptanalysis
Fast Fourier transforms
Security of data
Block ciphers
Linear cryptanalysis
Zero correlation
Cryptography

Access to Document

10.1007/978-3-662-43414-7_16

OpenUrl availability

Check availability in DTU Findit

Cite this

@inproceedings{bcd88e61ec764cc7981489777d093ca6,

title = "Zero-correlation linear cryptanalysis with FFT and improved attacks on ISO standards Camellia and CLEFIA",

abstract = "Zero-correlation linear cryptanalysis is based on the linear approximations with correlation exactly zero, which essentially generalizes the integral property, and has already been applied to several block ciphers - among others, yielding best known attacks to date on round-reduced TEA and CAST-256 as published in FSE'12 and ASIACRYPT'12, respectively. In this paper, we use the FFT (Fast Fourier Transform) technique to speed up the zero-correlation cryptanalysis. First, this allows us to improve upon the state-of-the-art cryptanalysis for the ISO/IEC standard and CRYPTREC-portfolio cipher Camellia. Namely, we present zero-correlation attacks on 11-round Camellia-128 and 12-round Camellia-192 with FL/FL-1 and whitening key starting from the first round, which is an improvement in the number of attacked rounds in both cases. Moreover, we provide multidimensional zero-correlation cryptanalysis of 14-round CLEFIA-192 and 15-round CLEFIA-256 that are attacks on the highest numbers of rounds in the classical single-key setting, respectively, with improvements in memory complexity. {\textcopyright} 2014 Springer-Verlag.",

keywords = "Computer Science (all), Theoretical Computer Science, Block cipher, Camellia, CLEFIA, FFT, Multidimesional linear cryptanalysis, Zero-correlation cryptanalysis, Fast Fourier transforms, Security of data, Block ciphers, Linear cryptanalysis, Zero correlation, Cryptography",

author = "Andrey Bogdanov and Huizheng Geng and Meiqin Wang and Long Wen and Baudoin Collard",

year = "2014",

doi = "10.1007/978-3-662-43414-7\_16",

language = "English",

isbn = "978-3-662-43413-0",

series = "Lecture Notes in Computer Science",

publisher = "Springer",

pages = "306--323",

booktitle = "Proceedings of the 20th International Conference on Selected Areas in Cryptography -- SAC 2013",

note = "20th International Workshop on Selected Areas of Cryptography, SAC 2013 ; Conference date: 14-08-2013 Through 16-08-2013",

}

Bogdanov, A, Geng, H, Wang, M, Wen, L & Collard, B 2014, Zero-correlation linear cryptanalysis with FFT and improved attacks on ISO standards Camellia and CLEFIA. in Proceedings of the 20th International Conference on Selected Areas in Cryptography -- SAC 2013. Springer, Lecture Notes in Computer Science, vol. 8282, pp. 306-323, 20th International Workshop on Selected Areas of Cryptography, Burnaby, Canada, 14/08/2013. https://doi.org/10.1007/978-3-662-43414-7_16

Zero-correlation linear cryptanalysis with FFT and improved attacks on ISO standards Camellia and CLEFIA. / Bogdanov, Andrey; Geng, Huizheng; Wang, Meiqin et al.
Proceedings of the 20th International Conference on Selected Areas in Cryptography -- SAC 2013. Springer, 2014. p. 306-323 (Lecture Notes in Computer Science, Vol. 8282).

Research output: Chapter in Book/Report/Conference proceeding › Article in proceedings › Research › peer-review

TY - GEN

T1 - Zero-correlation linear cryptanalysis with FFT and improved attacks on ISO standards Camellia and CLEFIA

AU - Bogdanov, Andrey

AU - Geng, Huizheng

AU - Wang, Meiqin

AU - Wen, Long

AU - Collard, Baudoin

N1 - Conference code: 20

PY - 2014

Y1 - 2014

N2 - Zero-correlation linear cryptanalysis is based on the linear approximations with correlation exactly zero, which essentially generalizes the integral property, and has already been applied to several block ciphers - among others, yielding best known attacks to date on round-reduced TEA and CAST-256 as published in FSE'12 and ASIACRYPT'12, respectively. In this paper, we use the FFT (Fast Fourier Transform) technique to speed up the zero-correlation cryptanalysis. First, this allows us to improve upon the state-of-the-art cryptanalysis for the ISO/IEC standard and CRYPTREC-portfolio cipher Camellia. Namely, we present zero-correlation attacks on 11-round Camellia-128 and 12-round Camellia-192 with FL/FL-1 and whitening key starting from the first round, which is an improvement in the number of attacked rounds in both cases. Moreover, we provide multidimensional zero-correlation cryptanalysis of 14-round CLEFIA-192 and 15-round CLEFIA-256 that are attacks on the highest numbers of rounds in the classical single-key setting, respectively, with improvements in memory complexity. © 2014 Springer-Verlag.

AB - Zero-correlation linear cryptanalysis is based on the linear approximations with correlation exactly zero, which essentially generalizes the integral property, and has already been applied to several block ciphers - among others, yielding best known attacks to date on round-reduced TEA and CAST-256 as published in FSE'12 and ASIACRYPT'12, respectively. In this paper, we use the FFT (Fast Fourier Transform) technique to speed up the zero-correlation cryptanalysis. First, this allows us to improve upon the state-of-the-art cryptanalysis for the ISO/IEC standard and CRYPTREC-portfolio cipher Camellia. Namely, we present zero-correlation attacks on 11-round Camellia-128 and 12-round Camellia-192 with FL/FL-1 and whitening key starting from the first round, which is an improvement in the number of attacked rounds in both cases. Moreover, we provide multidimensional zero-correlation cryptanalysis of 14-round CLEFIA-192 and 15-round CLEFIA-256 that are attacks on the highest numbers of rounds in the classical single-key setting, respectively, with improvements in memory complexity. © 2014 Springer-Verlag.

KW - Computer Science (all)

KW - Theoretical Computer Science

KW - Block cipher

KW - Camellia

KW - CLEFIA

KW - FFT

KW - Multidimesional linear cryptanalysis

KW - Zero-correlation cryptanalysis

KW - Fast Fourier transforms

KW - Security of data

KW - Block ciphers

KW - Linear cryptanalysis

KW - Zero correlation

KW - Cryptography

U2 - 10.1007/978-3-662-43414-7_16

DO - 10.1007/978-3-662-43414-7_16

M3 - Article in proceedings

SN - 978-3-662-43413-0

T3 - Lecture Notes in Computer Science

SP - 306

EP - 323

BT - Proceedings of the 20th International Conference on Selected Areas in Cryptography -- SAC 2013

PB - Springer

T2 - 20th International Workshop on Selected Areas of Cryptography

Y2 - 14 August 2013 through 16 August 2013

ER -

Zero-correlation linear cryptanalysis with FFT and improved attacks on ISO standards Camellia and CLEFIA

Abstract

Conference

Keywords

Access to Document

OpenUrl availability

Fingerprint

Cite this