International Association for Cryptologic Research

International Association
for Cryptologic Research

CryptoDB

Integral cryptanalysis in characteristic $p$

Authors:
Tim Beyne , KU Leuven
Michiel Verbauwhede , KU Leuven
Download:
Search ePrint
Search Google
Conference: ASIACRYPT 2025
Abstract: Integral and ultrametric integral cryptanalysis are generalized to finite rings of prime characteristic $p$ that are isomorphic to a product of fields. This extends, for instance, the complete state of the art in integral cryptanalysis from $\mathbb{F}_2^n$ to $\mathbb{F}_q^n$, for all prime powers $q$. A compact representation of transition matrices, based on convex polyhedra, is introduced to ensure that the proposed methods are computationally efficient even for large $p$. Automated tools are developed and applied to a few generic and several concrete primitives. The analysis shows that previous degree estimates for Feistel-GMiMC, HadesMiMC, AES-prime, small-pSquare and mid-pSquare are overly optimistic. Furthermore, except for AES-prime, these primitives do not meet their design criteria unless their number of rounds is substantially increased.
BibTeX
@inproceedings{asiacrypt-2025-35908,
  title={Integral cryptanalysis in characteristic $p$},
  publisher={Springer-Verlag},
  author={Tim Beyne and Michiel Verbauwhede},
  year=2025
}