分组密码TWIS的三子集中间相遇攻击

doi:10.3969/j.issn.1000-436x.2014.06.023

Abstract

Abstract:

To do further analysis of the security of lightweight block cipher TWIS, 3-subset meet-in-the-middle attack was applied to 10-round TWIS without the final whitening. Based on the weakness in the key schedule of TWIS:its ac-tual key size was only 62-bit and the confusion speed of the initial key was rather slow, the time complexity to recover the whole 62-bit key of 10-round TWIS was 2⁴⁵, and the data complexity was low enough with only one known plain-text-ciphertext pair. The result shows that block cipher TWIS is not secure under 3-subset meet-in-the-middle attack.

Key words: block cipher, TWIS, meet-in-the-middle attack, complexity

Ya-fei ZHENG,Hong-ru WEI. 3-subset meet-in-the-middle attack on block cipher TWIS[J]. Journal on Communications, 2014, 35(6): 180-184.

Figures/Tables 4

References 13

[1]	OJHA S K , KUMAR N , JAIN K . TWIS–a lightweight block cipher[A]. Information Systems Security, Berlin: Springer Heidelberg, 2009.280-291.
[2]	SHIRAI T , SHIBUTANI K , AKISHITA T , et al. The 128 bit block cipher CLEFIA[A]. Fast Software Encryption, Berlin: Springer Heidelberg, 2007.181-195.
[3]	SU B Z , WU W L , ZHANG L , et al. Full-round differential attack on TWIS block cipher[A]. Information Security Applications, Berlin: Springer Heidelberg, 2011.234-242.
[4]	KOCAK O , OZTOP N . FCryptanalysis of TWIS block cipher[A]. Re-search in Cryptology, Berlin: Springer Heidelberg, 2012.109-121.
[5]	DIFFIE W , HELLMAN M E . Special feature exhaustive cryptanalysis of the NBS data encryption standard[J]. Computer, 1977,10(6):74-84.
[6]	CHAUM D , EVERTSE J H . Cryptanalysis of DES with a reduced number of rounds[A]. Cryptology-CRYPTO'85 Proceedings, Berlin: Springer Heidelberg, 1986.192-211.
[7]	DEMIRCI H , SELCUK A A . A meet-in-the-middle attack on 8-round AES[A]. Fast Software Encryption, Berlin: Springer Heidelberg, 2008.116-126.
[8]	DEMIRCI H , TASKM ? , COBAN M , et al. Improved meet-in-the-middle attacks on AES[A]. Progress in Cryptology- INDOCRYPT 2009[C]. Berlin: Springer Heidelberg, 2009.114-156.
[9]	DUNKELMAN O , SEKAR G , PRENEEL B . Improved meet-in-the-middle attacks on reduced-round DES[A]. Progress in Cryptology–INDOCRYPT 2007[C]. Berlin: Springer Heidelberg, 2007.86-100.
[10]	INDESTEEGE S , KELLER N , DUNKELMAN O , et al. A practical attack on keeloq[A]. Cryptology-EUROCRYPT 2008[C]. Berlin: Springer Heidelberg, 2008.1-18.
[11]	DE C C , DUNKELMAN O , KNEZEVIC M . KATAN and KTAN-TAN—a family of small and efficient hardware-oriented block ci-phers[A]. Cryptographic Hardware and Embedded Systems-CHES 2009[C]. Berlin: Springer Heidelberg, 2009.272-288.
[12]	BOGDANOV A , RECHBERGER C . A 3-subset meet-in-the-middle attack: cryptanalysis of the lightweight block cipher KTANTAN[A]. Selected Areas in Cryptography[C]. Berlin: Springer Heidelberg, 2011.229-240.
[13]	SEKAR G , SEKAR G , MOUHA N , VELICHKOV V , et al. Meet-in-the-middle attacks on reduced-round XTEA[A]. Topics in Cryptology–CT-RSA 2011[C]. Berlin: Springer Heidelberg, 2011.250-267.

Metrics

Recommended 0

No Suggested Reading articles found!

轮数	RK_i?1	RK_i
前期白化	{k₀ ,k₁ ,k₂ ,k₉₉ ,k₁₀₀,…,k₁₂₇}	{k₀ ,k₁,…,k₅,k₁₀₂ ,k₁₀₃,…,k₁₂₇}
i=1	{k₀ ,k₁ ,k₂ ,k₉₉ ,k₁₀₀,…,k₁₂₇}	{k₀ ,k₁,…,k₅,k₁₀₂ ,k₁₀₃,…,k₁₂₇}
i=2	{k₀ ,k₁,…,k₅,k₁₀₂ ,k₁₀₃,…,k₁₂₇}	{k₀ ,k₁,…,k₈ ,k₁₀₅ ,k₁₀₆,…,k₁₂₇}
i=3	{k₀ ,k₁,…,k₈ ,k₁₀₅ ,k₁₀₆,…,k₁₂₇}	{k₀ ,k₁,…,k₁₁ ,k₁₀₈ ,k₁₀₉,…,k₁₂₇}
i=4	{k₀ ,k₁,…,k₁₁ ,k₁₀₈ ,k₁₀₉,…,k₁₂₇}	{k₀ ,k₁,…,k₁₄ ,k₁₁₁ ,k₁₁₂,…,k₁₂₇}
i=5	k₀ ,k₁,…,k₁₄ ,k₁₁₁ ,k₁₁₂,…,k₁₂₇}	{k₀ ,k₁,…,k₁₇ ,k₁₁₄ ,k₁₁₅,…,k₁₂₇}
i=6	{k₀ ,k₁,…,k₁₇ ,k₁₁₄ ,k₁₁₅,…,k₁₂₇}	{k₀ ,k₁,…,k₂₀,k₁₁₇ ,k₁₁₈,…,k₁₂₇}
i=7	{k₀ ,k₁,…,k₂₀,k₁₁₇ ,k₁₁₈,…,k₁₂₇}	{k0 ,k₁,…,k₂₃,k₁₂₀ ,k₁₂₁,…,k₁₂₇}
i=8	{k₀ ,k₁,…,k₂₃,k₁₂₀ ,k₁₂₁,…,k₁₂₇}	{k₀ ,k₁,…,k₂₆,k₁₂₃ ,k₁₂₄,…,k₁₂₇}
i=9	{k₀ ,k₁,…,k₂₆,k₁₂₃ ,k₁₂₄,…,k₁₂₇}	{k₀ ,k₁,…,k₂₉,k₁₂₆ ,k₁₂₇}
i=10	{k₀ ,k₁,…,k₂₉,k₁₂₆ ,k₁₂₇}	{k₁ ,k₂,…,k₃₂}
后期白化	{k₀ ,k₁,…,k₈ ,k₁₀₅ ,k₁₀₆,…,k₁₂₇}	{k₀ ,k₁,…,k₁₁ ,k₁₀₈ ,k₁₀₉,…,k₁₂₇}

算法	轮数	恢复密钥比特	计算复杂度	数据复杂度	攻击方法
本文	10	62	2 ⁴⁵	1	三子集MITM
文献[4]	10	12	2 ²¹	2 ²¹	差分攻击

[1]	Ping ZHANG, Kai NIU, Shengshi YAO, Jincheng DAI. Semantic communications for future: basic principle and implementation methodology [J]. Journal on Communications, 2023, 44(5): 1-14.
[2]	Guang YANG, Zhaoyang WU, Min NIE, Xiaohong YAN, Fan JIANG. Research on PAPR reduction algorithm based on CWGAN-SLM for multi-wavelet OFDM system [J]. Journal on Communications, 2023, 44(4): 99-110.
[3]	Bin HU, Xiao TAN, Senpeng WANG. SAT-based differential automatic search algorithm using divide-and-conquer strategy and its applications [J]. Journal on Communications, 2023, 44(4): 137-144.
[4]	Shaoyu DU. Improved integral attack——random linear distinguish and key recovery attack [J]. Journal on Communications, 2023, 44(4): 145-153.
[5]	Xiaoyun WANG, Xiaozhou ZHANG, Liang MA, Yajuan WANG, Mengting LOU, Tao JIANG, Jing JIN, Qixing WANG, Guangyi LIU. Research and optimization on the sensing algorithm for 6G integrated sensing and communication network [J]. Journal on Communications, 2023, 44(2): 219-230.
[6]	Zhengbin LIU, Yongqiang LI, Chaoxi ZHU. Fast algorithm to search for the minimum number of active S-boxes of block cipher [J]. Journal on Communications, 2023, 44(1): 118-128.
[7]	Manman LI, Shaozhen CHEN. Improved meet-in-the-middle attack on reduced-round Kiasu-BC algorithm [J]. Journal on Communications, 2022, 43(7): 41-48.
[8]	Zilong JIANG, Chenhui JIN. Impossible differential cryptanalysis of Saturnin algorithm [J]. Journal on Communications, 2022, 43(3): 53-62.
[9]	Min XIE,Jiaqi LI,Feng TIAN. Differential fault attack on FeW [J]. Journal on Communications, 2020, 41(4): 143-149.
[10]	Wei WANG,Ming ZHANG,Bobin YAO,Qinye YIN,Pengcheng MU. Computationally efficient direction-of-arrival estimation of non-circular signal based on subspace rotation technique [J]. Journal on Communications, 2020, 41(11): 198-205.
[11]	Xiaonian WU,Yingxin LI,Yongzhuang WEI,Yaping SUN. Impossible differential distinguisher analysis of GRANULE and MANTRA algorithm [J]. Journal on Communications, 2020, 41(1): 94-101.
[12]	Shunqin XIE,Ke ZHOU,Dahai CHEN,Xianglu LI,Sheng ZHONG,Jian ZHANG. Reduced phase-state detection based on virtual modulation indexes for Multi-h CPM [J]. Journal on Communications, 2019, 40(9): 45-50.
[13]	Min XIE,Feng TIAN,Jiaqi LI. Related-key impossible boomerang cryptanalysis on TWINE [J]. Journal on Communications, 2019, 40(9): 184-192.
[14]	Yan WANG,Shunbo LI,Gaina XUE. 2-adic complexity of SLCE sequence [J]. Journal on Communications, 2019, 40(8): 151-156.
[15]	Yu SHEN,Wei LI,Dawu GU,Yixin WU,Shan CAO,Ya LIU,Zhiqiang LIU,Zhihong ZHOU. Integral fault analysis of the ARIA cipher [J]. Journal on Communications, 2019, 40(2): 164-173.

3-subset meet-in-the-middle attack on block cipher TWIS

RichHTML

PDF

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 4

References 13

Related Articles 15

Metrics

Recommended 0