<p>The S-box linearization technology is proposed in 2020 by Jian Guo et al. They transform the S-box into linear component by adding restrictions to the plaintext space. Boura et al propose differential meet-in-the-middle cryptanalysis in 2023. Ahmadian et al improve the attack by introducing probabilistic key recovery and state-test technique at Eurocrypt 2024. This paper combines these techniques and proposes an improved differential MITM attack against SPN structure ciphers using S-box linearization technique, called S-box linearized differential MITM attack. It can extend the maximum rounds of differential MITM attacks without significantly increasing time complexity. A general framework of the attack is given and we successfully apply it to 24-round CRAFT with time complexity <InlineEquation ID="IEq1"> <EquationSource Format="TEX">\(2^{124.51}\)</EquationSource> <EquationSource Format="MATHML"><math> <msup> <mn>2</mn> <mrow> <mn>124.51</mn> </mrow> </msup> </math></EquationSource> </InlineEquation>, data complexity <InlineEquation ID="IEq2"> <EquationSource Format="TEX">\(2^{60}\)</EquationSource> <EquationSource Format="MATHML"><math> <msup> <mn>2</mn> <mn>60</mn> </msup> </math></EquationSource> </InlineEquation> and memory complexity <InlineEquation ID="IEq3"> <EquationSource Format="TEX">\(2^{57.58}\)</EquationSource> <EquationSource Format="MATHML"><math> <msup> <mn>2</mn> <mrow> <mn>57.58</mn> </mrow> </msup> </math></EquationSource> </InlineEquation>, improving the previous best known attack by one round&#xa0;in single key setting.</p>

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Improved differential meet-in-the-middle attack using S-box linearization

  • Yifan Cao,
  • Yang Yang

摘要

The S-box linearization technology is proposed in 2020 by Jian Guo et al. They transform the S-box into linear component by adding restrictions to the plaintext space. Boura et al propose differential meet-in-the-middle cryptanalysis in 2023. Ahmadian et al improve the attack by introducing probabilistic key recovery and state-test technique at Eurocrypt 2024. This paper combines these techniques and proposes an improved differential MITM attack against SPN structure ciphers using S-box linearization technique, called S-box linearized differential MITM attack. It can extend the maximum rounds of differential MITM attacks without significantly increasing time complexity. A general framework of the attack is given and we successfully apply it to 24-round CRAFT with time complexity \(2^{124.51}\) 2 124.51 , data complexity \(2^{60}\) 2 60 and memory complexity \(2^{57.58}\) 2 57.58 , improving the previous best known attack by one round in single key setting.