Welcome!
To use the personalized features of this site, please log in or register.
If you have forgotten your username or password, we can help.
My Menu
Saved Items

Security of Camellia against Truncated Differential Cryptanalysis

Masayuki Kanda5, 6 Contact Information and Tsutomu MatsumotoContact Information

(5)  NTT Information Sharing Platform Laboratories, 1-1 Hikari-no-oka, Yokosuka-shi, Kanagawa 239-0847, Japan
(6)  Yokohama National University, 79-5 Tokiwadai, Hodogaya-ku, Yokohama-shi, Kanagawa 240-8501, Japan
Abstract
This paper studies security against truncated differential cryptanalysis from the “designer’s” standpoint. In estimating the security, we use the upper bound of truncated differential probability. Previous works, Knudsen, Matsui and Moriai et al., searched for effective truncated differentials to attack byte-oriented block ciphers and computed the exact probability of the differentials. In this paper, we discuss the following items from the designer’s standpoint; (a) truncated differential probability of effective active-s-box, (b) XOR cancellation probability, and (c) effect of auxiliary functions, e.g., FL/FL -1-functions. We then combine them with Matsui’s search algorithm and evaluate the security of Camellia, jointly developed by NTT and Mitsubishi Electric Corporation, against truncated differential cryptanalysis. We prove (from the designer’s standpoint) that variants of Camellia with more than 11 rounds are secure against truncated differential cryptanalysis even if weak-key FL/FL -1-functions are taken into consideration.

Contact Information Masayuki Kanda
Email: kanda@isl.ntt.co.jp

Contact Information Tsutomu Matsumoto
Email: tsutomu@mlab.jks.ynu.ac.jp
Fulltext Preview (Small, Large)
Image of the first page of the fulltext

References secured to subscribers.



Export this chapter
Export this chapter as RIS | Text
 
Remote Address: 38.107.191.106 • Server: mpweb24
HTTP User Agent: CCBot/1.0 (+http://www.commoncrawl.org/bot.html)