Abstract:To promote the theory and application of cryptology, the design and implementation of cryptographic algorithms, in 2018, the Chinese Association for Cryptologic Research held the National Cryptographic Algorithm Design Competition. After the first round evaluation of security and implementation, FBC is selected one of the 10 block ciphers for the second round. FBC adopts 4-branch Extended Generalized Feistel Networks (EGFN) and it is designed with efficient implementation and good resistance against side-channel attacks. In this paper, we focus on the impossible differential attack, which is one of the most basic cryptanalytical methods, against FBC with 128-bit block size and key size (FBC-128). First, an equivalent expression with improved clarity of the round functions was derived. Then a structural property concerning the relationship among branches was explored. Combining those properties of its round function and structure, 9-round truncated impossible differentials were constructed for FBC-128, which is 2 rounds longer than previous works. Using this distinguisher, 13-round key recovery attack was mounted. The data and time complexity is 2126 chosen-plaintexts and 2122.96 encryptions respectively. To our knowledge, this is the best attack so far in terms of attacked rounds. Our attack exploited the properties of both structure and round function of FBC, and those observation and analysis would be beneficial to the understanding of FBC. Moreover, our results demonstrate when constructing impossible differentials, differentials with low hamming weight input and output difference may not always be optimal, which calls for more comprehensive analysis of the differential pattern.

Impossible Differential Cryptanalysis of Reduced-Round LBlock-s

Impossible differential attacks on reduced-round LBlock

Multidimensional Zero-Correlation Linear Cryptanalysis on 23-Round LBlock-s.

Improved Impossible Differential Attack on Reduced-Round LBlock.

Explicit Upper Bound Of Impossible Differentials For AES-Like Ciphers: Application To uBlock And Midori

Comprehensive Study of Integral Analysis on LBlock.

Improved Impossible Differential Cryptanalysis of Large-Block Rijndael

New Improved Impossible Differential Attack on Reduced-Round AES-128

Impossible differential cryptanalysis of FBC-128

Differential analysis of block cipher FBC

Cube Cryptanalysis of LBlock with Noisy Leakage

Impossible Differential Cryptanalysis of 14-Round Camellia-192.

Cryptanalysis Of Reduced-Round Simon32 And Simon48

New Impossible Differential Cryptanalysis of Reduced-Round Camellia

Differential-algebraic Cryptanalysis of Reduced-Round of Serpent-256

Impossible Differential Cryptanalysis of CLEFIA-128/192/256

Improved cryptanalysis of the FOX block cipher

Improved Results on Impossible Differential Cryptanalysis of Reduced-Round Camellia-192/256

Theoretical Round Modification Fault Analysis on AEGIS-128 with Algebraic Techniques

Improved Impossible Differential Cryptanalysis of CLEFIA.

Improved Impossible Differential Attacks on Large-Block Rijndael