.png){kind=icon}
返回
Integral Attack on the Full FUTURE Block Cipher
.png){kind=icon}
OA
AI
DOI：10.26599/TST.2024.9010007.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
SubCell MixColumn ShiftRow AddRoundKey F24Abstract: FUTURE is a recently proposed lightweight block cipher that achieved a remarkable hardware performance due to careful design decisions. FUTURE is an Advanced Encryption Standard (AES)-like Substitution- Permutation Network (SPN) with 10 rounds, whose round function consists of four components,. Unlike AES, it is a 64-bit-size block cipher with a 128bit secret key, and the state can be arranged into 16 cells. Therefore, the operations of FUTURE including its S-box is defined over. The previous studies have shown that the integral properties of 4-bit S-boxes are usually weaker than larger- size S-boxes, thus the number of rounds of FUTURE, i.e., 10 rounds only, might be too aggressive to provide enough resistance against integral cryptanalysis. In this paper, we mount the integral cryptanalysis on FUTURE. With state- of-the-art detection techniques, we identify several integral distinguishers of 7 rounds of FUTURE. By extending this 7-round distinguisher by 3 forward rounds, we manage to recover all the 128 bits secret keys from the full FUTURE cipher without the full codebook for the first time. To further achieve better time complexity, we also present a key recovery attack on full FUTURE with full codebook. Both attacks have better time complexity than existing results.
Keyword:
Ciphers
Vectors
Sparse matrices
Time complexity
Hardware
Costs
Zirconium
symmetric-key
integral attack
division property
FUTURE
期刊
T
IF:
3.5
论文数:
987
被引数:
2.5K
机构
引用论文
Rapid, label-free pathogen identification system for multidrug-resistant bacterial wound infection detection on military members in the battlefield.png)
PLOS ONEOAAI
PLOS ONEIF0
OAAI分享收藏Synthesis of precursor-derived 1D to 2D Co3O4nanostructures and their pseudo capacitance behaviourCrystEngComm
CrystEngCommIF0
PREAI
分享收藏
查看更多内容