Please use this identifier to cite or link to this item: http://localhost/handle/Hannan/653522
Title: Improved zero-correlation linear cryptanalysis of reduced-round Camellia under weak keys
Authors: Zhiqiang Liu;Bing Sun;Qingju Wang;Kerem Varici;Dawu Gu
subject: zero-correlation linear distinguisher|NESSIE block cipher portfolio|14-round Camellia-256|weak keys|zero-correlation linear cryptanalysis|13-round Camellia-192|reduced-round Camellia|key recovery attacks
Year: 2016
Publisher: IEEE
Abstract: Camellia is one of the widely used block ciphers, which has been included in the NESSIE block cipher portfolio and selected as a standard by ISO/IEC. In this study, the authors observe that there exist some interesting properties of the <i>FL</i>/<i>FL</i>-1 functions in Camellia. With this observation they derive some weak keys for the cipher, based on which they present the first known 8-round zero-correlation linear distinguisher of Camellia with <i>FL</i>/<i>FL</i>-1 layers. This result shows that the <i>FL</i>/<i>FL</i>-1 layers inserted in Camellia cannot resist zero-correlation linear cryptanalysis effectively for some weak keys since the currently best zero-correlation linear distinguisher for Camellia without <i>FL</i>/<i>FL</i>-1 layers also covers eight rounds. Moreover, by using the novel distinguisher, they launch key recovery attacks on 13-round Camellia-192 and 14-round Camellia-256. To their knowledge, these results are the best for Camellia-192 and Camellia-256 with <i>FL</i>/<i>FL</i>-1 and whitening layers.
URI: http://localhost/handle/Hannan/139164
http://localhost/handle/Hannan/653522
ISSN: 1751-8709
1751-8717
volume: 10
issue: 2
Appears in Collections:2016

Files in This Item:
File Description SizeFormat 
7412895.pdf528.21 kBAdobe PDFThumbnail
Preview File
Title: Improved zero-correlation linear cryptanalysis of reduced-round Camellia under weak keys
Authors: Zhiqiang Liu;Bing Sun;Qingju Wang;Kerem Varici;Dawu Gu
subject: zero-correlation linear distinguisher|NESSIE block cipher portfolio|14-round Camellia-256|weak keys|zero-correlation linear cryptanalysis|13-round Camellia-192|reduced-round Camellia|key recovery attacks
Year: 2016
Publisher: IEEE
Abstract: Camellia is one of the widely used block ciphers, which has been included in the NESSIE block cipher portfolio and selected as a standard by ISO/IEC. In this study, the authors observe that there exist some interesting properties of the <i>FL</i>/<i>FL</i>-1 functions in Camellia. With this observation they derive some weak keys for the cipher, based on which they present the first known 8-round zero-correlation linear distinguisher of Camellia with <i>FL</i>/<i>FL</i>-1 layers. This result shows that the <i>FL</i>/<i>FL</i>-1 layers inserted in Camellia cannot resist zero-correlation linear cryptanalysis effectively for some weak keys since the currently best zero-correlation linear distinguisher for Camellia without <i>FL</i>/<i>FL</i>-1 layers also covers eight rounds. Moreover, by using the novel distinguisher, they launch key recovery attacks on 13-round Camellia-192 and 14-round Camellia-256. To their knowledge, these results are the best for Camellia-192 and Camellia-256 with <i>FL</i>/<i>FL</i>-1 and whitening layers.
URI: http://localhost/handle/Hannan/139164
http://localhost/handle/Hannan/653522
ISSN: 1751-8709
1751-8717
volume: 10
issue: 2
Appears in Collections:2016

Files in This Item:
File Description SizeFormat 
7412895.pdf528.21 kBAdobe PDFThumbnail
Preview File
Title: Improved zero-correlation linear cryptanalysis of reduced-round Camellia under weak keys
Authors: Zhiqiang Liu;Bing Sun;Qingju Wang;Kerem Varici;Dawu Gu
subject: zero-correlation linear distinguisher|NESSIE block cipher portfolio|14-round Camellia-256|weak keys|zero-correlation linear cryptanalysis|13-round Camellia-192|reduced-round Camellia|key recovery attacks
Year: 2016
Publisher: IEEE
Abstract: Camellia is one of the widely used block ciphers, which has been included in the NESSIE block cipher portfolio and selected as a standard by ISO/IEC. In this study, the authors observe that there exist some interesting properties of the <i>FL</i>/<i>FL</i>-1 functions in Camellia. With this observation they derive some weak keys for the cipher, based on which they present the first known 8-round zero-correlation linear distinguisher of Camellia with <i>FL</i>/<i>FL</i>-1 layers. This result shows that the <i>FL</i>/<i>FL</i>-1 layers inserted in Camellia cannot resist zero-correlation linear cryptanalysis effectively for some weak keys since the currently best zero-correlation linear distinguisher for Camellia without <i>FL</i>/<i>FL</i>-1 layers also covers eight rounds. Moreover, by using the novel distinguisher, they launch key recovery attacks on 13-round Camellia-192 and 14-round Camellia-256. To their knowledge, these results are the best for Camellia-192 and Camellia-256 with <i>FL</i>/<i>FL</i>-1 and whitening layers.
URI: http://localhost/handle/Hannan/139164
http://localhost/handle/Hannan/653522
ISSN: 1751-8709
1751-8717
volume: 10
issue: 2
Appears in Collections:2016

Files in This Item:
File Description SizeFormat 
7412895.pdf528.21 kBAdobe PDFThumbnail
Preview File