Abstract:To promote the theory and application of cryptology, the design and implementation of cryptographic algorithms, in 2018, the Chinese Association for Cryptologic Research held the National Cryptographic Algorithm Design Competition. After the first round evaluation of security and implementation, FBC is selected one of the 10 block ciphers for the second round. FBC adopts 4-branch Extended Generalized Feistel Networks (EGFN) and it is designed with efficient implementation and good resistance against side-channel attacks. In this paper, we focus on the impossible differential attack, which is one of the most basic cryptanalytical methods, against FBC with 128-bit block size and key size (FBC-128). First, an equivalent expression with improved clarity of the round functions was derived. Then a structural property concerning the relationship among branches was explored. Combining those properties of its round function and structure, 9-round truncated impossible differentials were constructed for FBC-128, which is 2 rounds longer than previous works. Using this distinguisher, 13-round key recovery attack was mounted. The data and time complexity is 2126 chosen-plaintexts and 2122.96 encryptions respectively. To our knowledge, this is the best attack so far in terms of attacked rounds. Our attack exploited the properties of both structure and round function of FBC, and those observation and analysis would be beneficial to the understanding of FBC. Moreover, our results demonstrate when constructing impossible differentials, differentials with low hamming weight input and output difference may not always be optimal, which calls for more comprehensive analysis of the differential pattern.

Improved Differential Attacks On Gift-64

Differential-Linear Cryptanalysis of GIFT Family and GIFT-based Ciphers

MILP-Based Differential Attack on Round-Reduced GIFT

Towards Key-recovery-attack Friendly Distinguishers: Application to GIFT-128

Improved Related-Key Rectangle Attacks on GIFT

Generalized Boomerang Connectivity Table and Improved Cryptanalysis of GIFT.

MILP-based Related-Key Rectangle Attack and Its Application to GIFT, Khudra, MIBS

New Differential Cryptanalytic Results for Reduced-Round CAST-128.

Improved Impossible Differential Attacks on Large-Block Rijndael

Differential Cryptanalysis of TweGIFT-128 Based on Neural Network

Improved Differential Fault Analysis on LED with Constraint Equations: Towards Reaching Its Limit

Impossible Differential Attack On Reduced-Round Twine

Improved Impossible Differential Attack on Reduced-Round LBlock.

Cryptanalysis Of Midori128 Using Impossible Differential Techniques

Analysis of an Optimal Fault Attack on the LED-64 Lightweight Cryptosystem.

Impossible differential cryptanalysis of FBC-128

Improved Impossible Differential Attacks on Reduced-Round MISTY1.

A New Chosen IV Statistical Attack on Grain-128a Cipher.

In-depth analysis of S-boxes over binary finite fields concerning their differential and Feistel boomerang differential uniformities

Improved Impossible Differential Cryptanalysis of Large-Block Rijndael

MILP-based differential cryptanalysis on full-round shadow