Improved Meet-in-the-middle Attacks on Reduced-Round Piccolo
Ya Liu,Liang Cheng,Zhiqiang Liu,Wei Li,Qingju Wang,Dawu Gu
DOI: https://doi.org/10.1007/s11432-016-9157-y
2017-01-01
Science China Information Sciences
Abstract:Piccolo is a lightweight block cipher that adopts a generalized Feistel network structure with4 branches, each of which is 16 bit long. The key length is 80 or 128 bit, denoted by Piccolo-80 and Piccolo-128, respectively. In this paper, we mounted meet-in-the-middle attacks on 14-round Piccolo-80 without preand post-whitening keys and 18-round Piccolo-128 with post-whitening keys by exploiting the properties of the key schedule and Maximum Distance Separable(MDS) matrix. For Piccolo-80, we first constructed a 5-round distinguisher. Then 4 rounds and 5 rounds were appended at the beginning and at the end,respectively. Based on this structure, we mounted an attack on 14-round Piccolo-80 from the 5 th round to the 18 th round. The data, time, and memory complexities were 2 52 chosen plaintexts, 2 67.44 encryptions, and 2 64.91 blocks, respectively. For Piccolo-128, we built a 7-round distinguisher to attack 18-round Piccolo-128 from the 4 th round to the 21st round. The data, time, and memory complexities were 2 52 chosen plaintexts,2 126.63 encryptions, and 2 125.29 blocks, respectively. If not considering results on biclique cryptanalysis,these are currently the best public results on this reduced version of the Piccolo block cipher.