International Association for Cryptologic Research

International Association
for Cryptologic Research

CryptoDB

Improved Security Evaluation of SPN Block Ciphers and its Applications in the Single-key Attack on SKINNY

Authors:
Wenying Zhang , School of Information Science and Engineering, Shandong Normal University, Jinan 250014, China; Division of Mathematical Sciences, School of Physical and Mathematical Sciences, Nanyang Technological University, Singapore
Meichun Cao , School of Information Science and Engineering, Shandong Normal University, Jinan 250014, China
Jian Guo , Division of Mathematical Sciences, School of Physical and Mathematical Sciences, Nanyang Technological University, Singapore
Enes Pasalic , FAMNIT, University of Primorska, Koper, Slovenia
Download:
DOI: 10.13154/tosc.v2019.i4.171-191
URL: https://tosc.iacr.org/index.php/ToSC/article/view/8461
Search ePrint
Search Google
Abstract: In this paper, a new method for evaluating the integral property, truncated and impossible differentials for substitution-permutation network (SPN) block ciphers is proposed. The main assumption is an explicit description/expression of the internal state words in terms of the plaintext (ciphertext) words. By counting the number of times these words occur in the internal state expression, we can evaluate the resistance of a given block cipher to integral and impossible/truncated differential attacks more accurately than previous methods. More precisely, we explore the cryptographic consequences of uneven frequency of occurrences of plaintext (ciphertext) words appearing in the algebraic expression of the internal state words. This approach gives a new family of distinguishers employing different concepts such as the integral property, impossible/truncated differentials and the so-called zero-sum property. We then provide algorithms to determine the maximum number of rounds of such new types of distinguishers for SPN block ciphers. The potential and efficiency of this relatively simple method is confirmed through applications. For instance, in the case of SKINNY block cipher, several 10-round integral distinguishers, all of the 11-round impossible differentials, and a 7-round truncated differential could be determined. For the last case, using a single pair of plaintexts differing in three words so that (a = b = c) ≠ (a’ = b’ = c’), we are able to distinguish 7-round SKINNY from random permutations. More importantly, exploiting our distinguishers, we give the first practical attack on 11-round SKINNY-128-128 in the single-key setting (a theoretical attack reaches 16 rounds). Finally, using the same ideas, we provide a concise explanation on the existing distinguishers for round-reduced AES.
Video from TOSC 2020
BibTeX
@article{tosc-2020-30091,
  title={Improved Security Evaluation of SPN Block Ciphers and its Applications in the Single-key Attack on SKINNY},
  journal={IACR Transactions on Symmetric Cryptology},
  publisher={Ruhr-Universität Bochum},
  volume={2019, Issue 4},
  pages={171-191},
  url={https://tosc.iacr.org/index.php/ToSC/article/view/8461},
  doi={10.13154/tosc.v2019.i4.171-191},
  author={Wenying Zhang and Meichun Cao and Jian Guo and Enes Pasalic},
  year=2020
}