Abstract:Differential and linear cryptanalysis are two important methods to evaluate the security of block ciphers. Building on these two methods, differential‐linear (DL) cryptanalysis was introduced by Langford and Hellman in 1994. This cryptanalytic method has been not only extensively researched but also proven to be effective. In this paper, a security evaluation framework for AND‐RX ciphers against DL cryptanalysis is proposed, which is denoted as K6. In addition to modeling the structure of all the possible differential trails and linear trails at the bit level, we introduce a method to calculate this structure round by round. Based on this approach, an automatic algorithm is proposed to construct the DL distinguisher. Unlike previous methods, K6 uses a truncated differential and a linear hull instead of a differential characteristic and a linear approximation, which brings the bias of the DL distinguisher close to the experimental value. To validate the effectiveness of the framework, K6 is applied to Simon and Simeck, which are two typical AND‐RX ciphers. With the automatic algorithm, we discover an 11‐round DL distinguisher of Simon32 with bias 2−14.89 and a 12‐round DL distinguisher of Simeck32 with bias 2−14.89. Moreover, the 14‐round DL distinguisher of Simon48 with bias 2−22.30 is longer than the longest DL distinguisher currently known. In addition, the framework K6 shows advantages when analyzing ciphers with large block sizes. As far as we know, for Simon64/96/128 and Simeck48/64, the first DL distinguishers are obtained with our framework. The DL distinguishers are 16, 23, 32, 17, and 22 rounds of Simon64/96/128 and Simeck48/64 with bias 2−24.31, 2−47.57, 2−60.75, 2−22.54, and 2−31.41, respectively. To prove the correctness of distinguishers, experiments on Simon32 and Simeck32 have been performed. The experimental bias are 2−13.76 and 2−14.82, respectively. Comparisons of the theoretical and experimental results show good agreement.

The Wide Trail Design Strategy

A High-speed Implementation of AES

Optimised the Differential Trail of the Authenticated Encryption Algorithm Tiaoxin-346

Exploiting the Incomplete Diffusion Feature: A Specialized Analytical Side-Channel Attack Against the Aes and Its Application to Microcontroller Implementations

SAT-Based Automatic Searching for Differential and Linear Trails: Applying to CRAX

A Comprehensive Study of Multiple Deductions-Based Algebraic Trace Driven Cache Attacks on Aes

Security Analysis Of Block Cipher Bear

Adaptive Side-Channel Analysis Model and Its Applications to White-Box Block Cipher Implementations.

Differential-Linear Approximation Semi-unconstrained Searching and Partition Tree: Application to LEA and Speck

Automated Differential‐Linear Cryptanalysis for AND‐RX Ciphers

Breaking the Symmetry: a Way to Resist the New Differential Attack.

Mathematical Backdoors in Symmetric Encryption Systems - Proposal for a Backdoored AES-like Block Cipher

DefScan : Provably Defeating Scan Attack on AES-Like Ciphers

Theoretical Round Modification Fault Analysis on AEGIS-128 with Algebraic Techniques

Differential Fault Analysis on AES and DES

Random Block Cipher Frame and Implementation

Towards non-independence of modular additions in searching differential trails of ARX ciphers: new automatic methods with application to SPECK and Chaskey

Constructing the Impossible Differential of Type-II GFN with Boolean Function and Its Application to WARP

Explicit Upper Bound Of Impossible Differentials For AES-Like Ciphers: Application To uBlock And Midori

Integral Cryptanalysis of the Block Cipher E2

A Parallel Yet Pipelined Architecture for Efficient Implementation of the Advanced Encryption Standard Algorithm on Reconfigurable Hardware