Abstract:At CRYPTO 2019, A. Gohr made a breakthrough in combining classical cryptanalysis and deep learning and applied his method to round reduced SPECK successfully. However, his suggested neural‐based distinguisher scheme is only limited to differential cryptanalysis. In this paper, we have the following contributions: 1. We combine integral cryptanalysis and deep learning to propose our neural‐based integral distinguisher scheme for the first time. To illustrate the effectiveness of our distinguisher scheme, we apply it to block ciphers of different structures, such as substitution‐permutation structure ciphers (PRESENT and RECTANGLE), Feistel structure cipher (LBLOCK), and add‐rotate‐XOR cipher (SPECK) and compare the results with the state‐of‐the‐art classical integral distinguishing method, namely, the bit‐based division property. To our great surprise, our neural network‐based integral distinguisher can extend the number of distinguished rounds for all block ciphers by two additional rounds (except RECTANGLE, where it is improved by one round) under the same data complexity. 2. As an additional advantage of our scheme, we demonstrate that our Neural Distinguisher (ND) is not only helpful for block cipher designers but also can assist attackers to mount key recovery attacks. To this end, we show how to exploit our ND to mount a key recovery attack and apply it to SPECK32/64. Out of the 1000 trials of key recovery attacks with different keys in 45% of cases, the first suggested subkey is exactly the real subkey of the last round of the cipher. For the remaining 55%, the second or third suggested subkey is exactly the real subkey of the last round of the cipher. 3. To have a piece of concrete evidence for the advantage of our scheme over classical integral methods, we design an experiment known as the same‐difference experiment. In this experiment, we show that our ND can learn some features beyond the capabilities of classical integral methods. We then propose a set of features that can justify the gap between classical integral methods and our neural‐based integral distinguisher and verify them by further experiments.

Deep Learning based Differential Distinguisher for Lightweight Block Ciphers

Machine Learning Assisted Differential Distinguishers for Lightweight Ciphers.

Multiple Differential Distinguisher of SIMECK32/64 Based on Deep Learning

A Deep Neural Differential Distinguisher for ARX based Block Cipher

A deep learning aided differential distinguisher improvement framework with more lightweight and universality

Mixture Differential Cryptanalysis on Round-Reduced SIMON32/64 Using Machine Learning

Breaking Indistinguishability with Transfer Learning: A First Look at SPECK32/64 Lightweight Block Ciphers

A New (Related‐Key) Neural Distinguisher Using Two Differences for Differential Cryptanalysis

Deep-Learning-Based Neural Distinguisher for Format-Preserving Encryption Schemes FF1 and FF3

Truncated Differential-Neural Key Recovery Attacks on Round-Reduced HIGHT

An improved integral distinguisher scheme based on neural networks

Comprehensive Neural Cryptanalysis on Block Ciphers Using Different Encryption Methods

Improved deep learning aided key recovery framework: applications to large-state block ciphers

Differential cryptanalysis of full-round ANU-II ultra-lightweight block cipher

Statistical Fault Analysis of the Simeck Lightweight Cipher in the Ubiquitous Sensor Networks

Differential Cryptanalysis of TweGIFT-128 Based on Neural Network

Bridging Machine Learning and Cryptanalysis via EDLCT.

Approximating neural distinguishers using differential-linear imbalance

Differential Invariant Subspace Cryptanalysis – A Realtime Attack against IoT-friendly Word-based Block Ciphers

Bayesian Modeling for Differential Cryptanalysis of Block Ciphers: A DES Instance

Fault-propagate Pattern Based DFA on PRESENT and PRINTcipher