An Improved Impossible Differential Attack on MISTY1

Orr Dunkelman, N. Keller

Research output: Chapter in Book/Report/Conference proceedingChapterpeer-review


MISTY1 is a Feistel block cipher that received a great deal of cryptographic attention. Its recursive structure, as well as the added FL layers, have been successful in thwarting various cryptanalytic techniques. The best known attacks on reduced variants of the cipher are on either a 4-round variant with the FL functions, or a 6-round variant without the FL functions (out of the 8 rounds of the cipher). In this paper we combine the generic impossible differential attack against 5-round Feistel ciphers with the dedicated Slicing attack to mount an attack on 5-round MISTY1 with all the FL functions with time complexity of 246.45 simple operations. We then extend the attack to 6-round MISTY1 with the FL functions present, leading to the best known cryptanalytic result on the cipher. We also present an attack on 7-round MISTY1 without the FL layers.
Original languageAmerican English
Title of host publicationAdvances in Cryptology - ASIACRYPT 2008
EditorsJosef Pieprzyk
Place of PublicationBerlin Heidelberg
StatePublished - 2008

Publication series

NameLecture Notes in Computer Science


Dive into the research topics of 'An Improved Impossible Differential Attack on MISTY1'. Together they form a unique fingerprint.

Cite this