Improved higher-order differential attacks on MISTY1

Achiya Bar-On

doi:10.1007/978-3-662-48116-5_2

Improved higher-order differential attacks on MISTY1

Achiya Bar-On

Department of Mathematics

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

3 Scopus citations

Abstract

MISTY1 is a block cipher designed by Matsui in 1997. It is widely deployed in Japan, and is recognized internationally as an European NESSIE-recommended cipher and an ISO standard. Since its introduction, MISTY1 was subjected to extensive cryptanalytic efforts, yet no attack significantly faster than exhaustive key search is known on its full version. The best currently known attack is a higher-order differential attack presented by Tsunoo et al. in 2012 which breaks a reduced variant of MISTY1 that contains 7 of the 8 rounds and 4 of the 5 FL layers in 2^49.7 data and 2^116.4 time. In this paper, we present improved higher-order differential attacks on reduced-round MISTY 1. Our attack on the variant considered by Tsunoo et al. requires roughly the same amount of data and only 2100.4 time (i.e., is 2¹⁶ times faster). Furthermore, we present the first attack on a MISTY1 variant with 7 rounds and all 5 FL layers, requiring 2^51.4 data and 2¹²¹ time. To achieve our results, we use a new higher-order differential characteristic for 4-round MISTY1, as well as enhanced key recovery algorithms based on the partial sums technique.

Original language	English
Title of host publication	Fast Software Encryption - 22nd International Workshop, FSE 2015, Revised Selected Papers
Editors	Gregor Leander
Publisher	Springer Verlag
Pages	28-47
Number of pages	20
ISBN (Print)	9783662481158
DOIs	https://doi.org/10.1007/978-3-662-48116-5_2
State	Published - 2015
Event	22nd International Workshop on Fast Software Encryption, FSE 2015 - Istanbul, Turkey Duration: 8 Mar 2015 → 11 Mar 2015

Publication series

Name	Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume	9054
ISSN (Print)	0302-9743
ISSN (Electronic)	1611-3349

Conference

Conference	22nd International Workshop on Fast Software Encryption, FSE 2015
Country/Territory	Turkey
City	Istanbul
Period	8/03/15 → 11/03/15

Bibliographical note

Publisher Copyright:
© Springer International Publishing Switzerland 2015.

Funding

A. Bar-On—This research was partially supported by the Israeli Ministry of Science, Technology and Space, and by the Check Point Institute for Information Security.

Funders	Funder number
Check Point Institute for Information Security
Ministry of Science, Technology and Space

Access to Document

10.1007/978-3-662-48116-5_2

Cite this

Bar-On, A. (2015). Improved higher-order differential attacks on MISTY1. In G. Leander (Ed.), Fast Software Encryption - 22nd International Workshop, FSE 2015, Revised Selected Papers (pp. 28-47). (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 9054). Springer Verlag. https://doi.org/10.1007/978-3-662-48116-5_2

@inproceedings{f9cc46db98344b24a0b3d1b0ecd9169e,

title = "Improved higher-order differential attacks on MISTY1",

abstract = "MISTY1 is a block cipher designed by Matsui in 1997. It is widely deployed in Japan, and is recognized internationally as an European NESSIE-recommended cipher and an ISO standard. Since its introduction, MISTY1 was subjected to extensive cryptanalytic efforts, yet no attack significantly faster than exhaustive key search is known on its full version. The best currently known attack is a higher-order differential attack presented by Tsunoo et al. in 2012 which breaks a reduced variant of MISTY1 that contains 7 of the 8 rounds and 4 of the 5 FL layers in 249.7 data and 2116.4 time. In this paper, we present improved higher-order differential attacks on reduced-round MISTY 1. Our attack on the variant considered by Tsunoo et al. requires roughly the same amount of data and only 2100.4 time (i.e., is 216 times faster). Furthermore, we present the first attack on a MISTY1 variant with 7 rounds and all 5 FL layers, requiring 251.4 data and 2121 time. To achieve our results, we use a new higher-order differential characteristic for 4-round MISTY1, as well as enhanced key recovery algorithms based on the partial sums technique.",

author = "Achiya Bar-On",

note = "Publisher Copyright: {\textcopyright} Springer International Publishing Switzerland 2015.; 22nd International Workshop on Fast Software Encryption, FSE 2015 ; Conference date: 08-03-2015 Through 11-03-2015",

year = "2015",

doi = "10.1007/978-3-662-48116-5_2",

language = "אנגלית",

isbn = "9783662481158",

series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",

publisher = "Springer Verlag",

pages = "28--47",

editor = "Gregor Leander",

booktitle = "Fast Software Encryption - 22nd International Workshop, FSE 2015, Revised Selected Papers",

address = "גרמניה",

}

Bar-On, A 2015, Improved higher-order differential attacks on MISTY1. in G Leander (ed.), Fast Software Encryption - 22nd International Workshop, FSE 2015, Revised Selected Papers. Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), vol. 9054, Springer Verlag, pp. 28-47, 22nd International Workshop on Fast Software Encryption, FSE 2015, Istanbul, Turkey, 8/03/15. https://doi.org/10.1007/978-3-662-48116-5_2

Improved higher-order differential attacks on MISTY1. / Bar-On, Achiya.
Fast Software Encryption - 22nd International Workshop, FSE 2015, Revised Selected Papers. ed. / Gregor Leander. Springer Verlag, 2015. p. 28-47 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 9054).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - Improved higher-order differential attacks on MISTY1

AU - Bar-On, Achiya

PY - 2015

Y1 - 2015

N2 - MISTY1 is a block cipher designed by Matsui in 1997. It is widely deployed in Japan, and is recognized internationally as an European NESSIE-recommended cipher and an ISO standard. Since its introduction, MISTY1 was subjected to extensive cryptanalytic efforts, yet no attack significantly faster than exhaustive key search is known on its full version. The best currently known attack is a higher-order differential attack presented by Tsunoo et al. in 2012 which breaks a reduced variant of MISTY1 that contains 7 of the 8 rounds and 4 of the 5 FL layers in 249.7 data and 2116.4 time. In this paper, we present improved higher-order differential attacks on reduced-round MISTY 1. Our attack on the variant considered by Tsunoo et al. requires roughly the same amount of data and only 2100.4 time (i.e., is 216 times faster). Furthermore, we present the first attack on a MISTY1 variant with 7 rounds and all 5 FL layers, requiring 251.4 data and 2121 time. To achieve our results, we use a new higher-order differential characteristic for 4-round MISTY1, as well as enhanced key recovery algorithms based on the partial sums technique.

AB - MISTY1 is a block cipher designed by Matsui in 1997. It is widely deployed in Japan, and is recognized internationally as an European NESSIE-recommended cipher and an ISO standard. Since its introduction, MISTY1 was subjected to extensive cryptanalytic efforts, yet no attack significantly faster than exhaustive key search is known on its full version. The best currently known attack is a higher-order differential attack presented by Tsunoo et al. in 2012 which breaks a reduced variant of MISTY1 that contains 7 of the 8 rounds and 4 of the 5 FL layers in 249.7 data and 2116.4 time. In this paper, we present improved higher-order differential attacks on reduced-round MISTY 1. Our attack on the variant considered by Tsunoo et al. requires roughly the same amount of data and only 2100.4 time (i.e., is 216 times faster). Furthermore, we present the first attack on a MISTY1 variant with 7 rounds and all 5 FL layers, requiring 251.4 data and 2121 time. To achieve our results, we use a new higher-order differential characteristic for 4-round MISTY1, as well as enhanced key recovery algorithms based on the partial sums technique.

UR - http://www.scopus.com/inward/record.url?scp=84944520122&partnerID=8YFLogxK

U2 - 10.1007/978-3-662-48116-5_2

DO - 10.1007/978-3-662-48116-5_2

M3 - ???researchoutput.researchoutputtypes.contributiontobookanthology.conference???

AN - SCOPUS:84944520122

SN - 9783662481158

T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

SP - 28

EP - 47

BT - Fast Software Encryption - 22nd International Workshop, FSE 2015, Revised Selected Papers

A2 - Leander, Gregor

PB - Springer Verlag

T2 - 22nd International Workshop on Fast Software Encryption, FSE 2015

Y2 - 8 March 2015 through 11 March 2015

ER -

Bar-On A. Improved higher-order differential attacks on MISTY1. In Leander G, editor, Fast Software Encryption - 22nd International Workshop, FSE 2015, Revised Selected Papers. Springer Verlag. 2015. p. 28-47. (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)). doi: 10.1007/978-3-662-48116-5_2

Improved higher-order differential attacks on MISTY1

Abstract

Publication series

Conference

Bibliographical note

Funding

Access to Document

Other files and links

Fingerprint

Cite this