Abstract:When generating quartets for the rectangle attacks on ciphers with linear key-schedule, we find the right quartets which may suggest key candidates have to satisfy some nonlinear relations. However, some quartets generated always violate these relations, so that they will never suggest any key candidates. Inspired by previous rectangle frameworks, we find that guessing certain key cells before generating quartets may reduce the number of invalid quartets. However, guessing a lot of key cells at once may lose the benefit from the early abort technique, which may lead to a higher overall complexity. To get better tradeoff, we build a new rectangle framework on ciphers with linear key-schedule with the purpose of reducing overall complexity or attacking more rounds. In the tradeoff model, there are many parameters affecting the overall complexity, especially for the choices of the number and positions of key guessing cells before generating quartets. To identify optimal parameters, we build a uniform automatic tool on SKINNY as an example, which includes the optimal rectangle distinguishers for key-recovery phase, the number and positions of key guessing cells before generating quartets, the size of key counters to build that affecting the exhaustive search step, etc. Based on the automatic tool, we identify a 32-round key-recovery attack on SKINNY-128-384 in the related-key setting, which extends the best previous attack by 2 rounds. For other versions with n-2n or n-3n, we also achieve one more round than before. In addition, using the previous rectangle distinguishers, we achieve better attacks on round-reduced ForkSkinny, Deoxys-BC-384 and GIFT-64. At last, we discuss the conversion of our rectangle framework from related-key setting into single-key setting and give new single-key rectangle attack on 10-round Serpent.

Improved Related-Key Rectangle Attacks on GIFT

MILP-based Related-Key Rectangle Attack and Its Application to GIFT, Khudra, MIBS

Generalized Boomerang Connectivity Table and Improved Cryptanalysis of GIFT.

Improved Differential Attacks On Gift-64

Differential-Linear Cryptanalysis of GIFT Family and GIFT-based Ciphers

Generalized Related-Key Rectangle Attacks on Block Ciphers with Linear Key Schedule: Applications to SKINNY and GIFT.

Towards Key-recovery-attack Friendly Distinguishers: Application to GIFT-128

MILP-Based Differential Attack on Round-Reduced GIFT

Key Guessing Strategies for Linear Key-Schedule Algorithms in Rectangle Attacks

Optimizing Rectangle and Boomerang Attacks: A Unified and Generic Framework for Key Recovery

Theoretical Round Modification Fault Analysis on AEGIS-128 with Algebraic Techniques

Quantum Rectangle Attack and Its Application on Deoxys-BC

New Observation on the Key Schedule of RECTANGLE

Improved Related Key Attack on 44-Round SHACAL-2

Deep round key recovery attacks and countermeasure in persistent fault model: a case study on GIFT and KLEIN

Improved related-key boomerang attacks on round-reduced threefish-512

Improved Related-Tweakey Rectangle Attacks On Reduced-Round Deoxys-Bc-384 And Deoxys-I-256-128

Automated Search Oriented To Key Recovery On Ciphers With Linear Key Schedule Applications To Boomerangs In Skinny And Forkskinny

New Related-Tweakey Boomerang and Rectangle Attacks on Deoxys-BC Including BDT Effect

Improved Integral Attacks Without Full Codebook.

SAT-based Analysis of Related-key Impossible Distinguishers on Piccolo and (Tweakable) TWINE