Abstract:International Journal of Distributed Sensor Networks, Volume 18, Issue 9, September 2022. Lightweight ciphers are often used as the underlying encryption algorithm in resource-constrained devices. Their cryptographic security is a mandatory goal for ensuring the security of data transmission. Differential cryptanalysis is one of the most fundamental methods applicable primarily to block ciphers, and the resistance against this type of cryptanalysis is a necessary design criterion. ANU-II is an ultra-lightweight block cipher proposed in 2017, whose design offers many advantages such as the use of fewer hardware resources (logic gates), low power consumption and fast encryption for Internet of Things devices. The designers of ANU-II claimed its resistance against differential cryptanalysis and postulated that the design is safe enough for Internet of Things devices. However, as addressed in this article, the security claims made by designers appear not to be well grounded. Using mixed-integer linear programming–like techniques, we identify one-round differential characteristic that holds with probability 1, which is then efficiently employed in mounting the key recovery attack on full-round ANU-II with only 22 chosen plaintexts and 262.4 full-round encryptions. The result shows that the designers' security evaluation of ANU-II against differential cryptanalysis is incorrect and the design rationale is flawed. To remedy this weakness, we provide an improved variant of ANU-II, which has much better resistance to differential cryptanalysis without affecting the hardware and/or software implementation cost.

Cryptanalysis of Reduced-Round Midori64 Block Cipher.

Cryptanalysis Of Midori128 Using Impossible Differential Techniques

Cryptanalysis of Reduced-Round MIBS Block Cipher

MILP-based differential cryptanalysis on full-round shadow

Differential-algebraic Cryptanalysis of Reduced-Round of Serpent-256

Explicit Upper Bound Of Impossible Differentials For AES-Like Ciphers: Application To uBlock And Midori

Differential Invariant Subspace Cryptanalysis – A Realtime Attack against IoT-friendly Word-based Block Ciphers

Improved Impossible Differential Attack on Reduced-Round LBlock.

New Differential Cryptanalytic Results for Reduced-Round CAST-128.

Truncated Differential-Neural Key Recovery Attacks on Round-Reduced HIGHT

Meet-in-the-Middle Technique for Truncated Differential and Its Applications to CLEFIA and Camellia

Impossible Differential Attack On Reduced-Round Twine

Improved Impossible Differential Attacks on Reduced-Round MISTY1.

New Impossible Differential Cryptanalysis of Reduced-Round Camellia

Differential cryptanalysis of full-round ANU-II ultra-lightweight block cipher

Related-Tweakey Impossible Differential Attack on Reduced-Round Deoxys-BC-256.

MILP-based Related-Key Rectangle Attack and Its Application to GIFT, Khudra, MIBS

Improved Related-Tweakey Rectangle Attacks On Reduced-Round Deoxys-Bc-384 And Deoxys-I-256-128

Partial-Collision Attack on the Round-Reduced Compression Function of Skein-256.

Differential, Linear, and Meet-in-the-Middle Attacks on the Lightweight Block Cipher RBFK

Automatic Search of Meet-in-the-Middle Differential Fault Analysis on AES-like Ciphers.