The cipher family SPEED (and an associated hashing mode) was recently proposed in Financial Cryptography '97. In cryptanalyzing the cipher we found several troubling potential weaknesses. Next, we were able to efficiently break the
SPEED hashing mode using differential related-key techniques. Finally, we examined differential attacks against the 48-round
version of SPEED. These results raise some significant questions about the security of the SPEED design.