Abstract:This paper presents the first results on AIDA/cube, algebraic and side-channel attacks on variable number of rounds of all members of the KATAN family of block ciphers. Our cube attacks reach 60, 40 and 30 rounds of KATAN32, KATAN48 and KATAN64, respectively. In our algebraic attacks, we use SAT solvers as a tool to solve the quadratic equations representation of all KATAN ciphers. We introduced a novel pre-processing stage on the equations system before feeding it to the SAT solver. This way, we could break 79, 64 and 60 rounds of KATAN32, KATAN48, KATAN64, respectively. We show how to perform side channel attacks on the full 254-round KATAN32 with one-bit information leakage from the internal state by cube attacks. Finally, we show how to reduce the attack complexity by combining the cube attack with the algebraic attack to recover the full 80-bit key. Further contributions include new phenomena observed in cube, algebraic and side-channel attacks on the KATAN ciphers. For the cube attacks, we observed that the same maxterms suggested more than one cube equation, thus reducing the overall data and time complexities. For the algebraic attacks, a novel pre-processing step led to a speed up of the SAT solver program. For the side-channel attacks, 29 linearly independent cube equations were recovered after 40-round KATAN32. Finally, the combined algebraic and cube attack, a leakage of key bits after 71 rounds led to a speed up of the algebraic attack.

Differential-algebraic Cryptanalysis of Reduced-Round of Serpent-256

Impossible Differential Attack On Reduced-Round Twine

New Differential Cryptanalytic Results for Reduced-Round CAST-128.

New Impossible Differential Cryptanalysis of Reduced-Round Camellia

Theoretical Round Modification Fault Analysis on AEGIS-128 with Algebraic Techniques

Improved Impossible Differential Attack on Reduced-Round LBlock.

Cryptanalysis of Reduced-Round Midori64 Block Cipher.

Meet-in-the-Middle Technique for Truncated Differential and Its Applications to CLEFIA and Camellia

Quantum impossible differential and truncated differential cryptanalysis

Improved Attacks on Reduced-Round Camellia-128/192/256.

Partial-Collision Attack on the Round-Reduced Compression Function of Skein-256.

Cryptanalysis of Reduced-Round MIBS Block Cipher

Impossible Differential Cryptanalysis of 14-Round Camellia-192.

Impossible Differential Attack on Simpira V2.

New Linear Cryptanalytic Results of Reduced-Round of CAST-128 and CAST-256

Algebraic, Aida/Cube And Side Channel Analysis Of Katan Family Of Block Ciphers

New linear approximation of modular addition and improved differential-linear cryptanalysis of SPARX-64/128

Improved Cryptanalysis of the Block Cipher KASUMI

New Impossible Differential Attacks Of Reduced-Round Camellia-192 And Camellia-256

MILP-based differential cryptanalysis on full-round shadow

Improved Differential Fault Analysis Of Sosemanuk With Algebraic Techniques