Automatic Search of Rectangle Attacks on Feistel Ciphers: Application to WARP - Archive ouverte HAL
Article Dans Une Revue IACR Transactions on Symmetric Cryptology Année : 2022

Automatic Search of Rectangle Attacks on Feistel Ciphers: Application to WARP

Résumé

In this paper we present a boomerang analysis of WARP, a recently proposed Generalized Feistel Network with extremely compact hardware implementations. We start by looking for boomerang characteristics that directly take into account the boomerang switch effects by showing how to adapt Delaune et al. automated tool to the case of Feistel ciphers, and discuss several improvements to keep the execution time reasonable. This technique returns a 23-round distinguisher of probability 2^{−124}, which becomes the best distinguisher presented on WARP so far. We then look for an attack by adding the key recovery phase to our model and we obtain a 26-round rectangle attack with time and data complexities of 2^{115.9} and 2^{120.6} respectively, again resulting in the best result presented so far. Incidentally, our analysis discloses how an attacker can take advantage of the position of the key addition (put after the S-box application to avoid complementation properties), which in our case offers an improvement of a factor of 2^{75} of the time complexity in comparison to a variant with the key addition positioned before. Note that our findings do not threaten the security of the cipher which iterates 41 rounds.
Fichier principal
Vignette du fichier
ToSC2022_2_05.pdf (1.11 Mo) Télécharger le fichier
Origine Fichiers éditeurs autorisés sur une archive ouverte

Dates et versions

hal-03760280 , version 1 (14-11-2022)

Licence

Identifiants

Citer

Virginie Lallemand, Marine Minier, Loïc Rouquette. Automatic Search of Rectangle Attacks on Feistel Ciphers: Application to WARP. IACR Transactions on Symmetric Cryptology, 2022, 2022 (2), pp.113-140. ⟨10.46586/tosc.v2022.i2.113-140⟩. ⟨hal-03760280⟩
272 Consultations
140 Téléchargements

Altmetric

Partager

More