Results 41 to 50 of about 14,013 (215)
, 2008 We show that the LASH-xhash function is vulnerable to attacks that trade time for memory, including collision attacks as fast as 2(4x/11)and preimage attacks as fast as 2(4x/7). Moreover, we briefly mention heuristic lattice based collision attacks that use small memory but require very long messages that are expected to find collisions much faster ...
Ron Steinfeld +6 more
openaire +4 more sources
, 2009 We present several attacks on the block cipher C2, which is used for encrypting DVD Audio discs and Secure Digital cards. C2 has a 56 bit key and a secret 8 to 8 bit S-box. We show that if the attacker is allowed to choose the key, the S-box can be recovered in 224 C2 encryptions. Attacking the 56 bit key for a known S-box can be done in complexity 248.
Julia Borghoff +3 more
openaire +1 more source
Security Analysis of Lightweight IoT Cipher: Chaskey
Cryptography, 2020 This paper presents the differential cryptanalysis of ARX based cipher Chaskey using tree search based heuristic approach. ARX algorithms are suitable for resource-constrained devices such as IoT and very resistant to standard cryptanalysis such as ...
Ashutosh Dhar Dwivedi
doaj +1 more source
Linear Cryptanalysis: Key Schedules and Tweakable Block Ciphers
IACR Transactions on Symmetric Cryptology, 2017 This paper serves as a systematization of knowledge of linear cryptanalysis and provides novel insights in the areas of key schedule design and tweakable block ciphers.
Thorsten Kranz +2 more
doaj +1 more source
, 2002 This paper describes an effort to attack S-DES using differential cryptanalysis and linear cryptanalysis. S-DES is a reduced version of the Data Encryption Standard (DES). It also includes a discussion on the subject of cryptology and a literature survey
Dr. K. S. Ooi, Brain Chin Vito
core +1 more source
Dianzi Jishu Yingyong, 2021 NBC is a family of block ciphers using Generalized Feistel structure, designed by Xu Hong et al. There are three block and key sizes,i.e.,128/128, 128/256 and 256/256. A 16-bit Sbox is involved in the cipher as the non-linear component.
Yang Jiangshuai +3 more
doaj +1 more source
Towards a Unifying View of Block Cipher Cryptanalysis [PDF]
, 2004 We introduce commutative diagram cryptanalysis, a framework for expressing certain kinds of attacks on product ciphers. We show that many familiar attacks, including linear cryptanalysis, differential cryptanalysis, differential-linear cryptanalysis ...
David Wagner
core +1 more source
Cryptanalysis of ARMADILLO2 [PDF]
, 2011 ARMADILLO2 is the recommended variant of a multi-purpose cryptographic primitive dedicated to hardware which has been proposed by Badel et al. in [1]. In this paper we propose a meet-in-the-middle technique that allows us to invert the ARMADILLO2 function.
Abdelraheem, Mohamed Ahmed +4 more
openaire +4 more sources
, 2020 In this paper a new variant of the linear cryptanalysis method for block ciphers is proposed. It is based on the existing method of multidimensional linear cryptanalysis, but offers the option of discarding a whole half-space of linear approximations ...
Nyberg, Kaisa
core +1 more source
Cryptanalysis of TWOPRIME [PDF]
, 1998 Ding et al [DNRS97] propose a stream generator based on several layers. We present several attacks. First, we observe that the non-surjectivity of a linear combination step allows us to recover half the key with minimal effort. Next, we show that the various bytes are insufficiently mixed by these layers, enabling an attack similar to those on two-loop
Don Coppersmith +3 more
openaire +1 more source