Paper 2001/038

Flaws in differential cryptanalysis of Skipjack

Louis Granboulan

Abstract

This paper is motivated by some results presented by Knudsen, Robshaw and Wagner at Crypto'99, that described many attacks of reduced versions of Skipjack, some of them being erroneous. Differential cryptanalysis is based on distinguishers, any attack should prove that the events that triggers the analysis has not the same probability for the cipher than for a random function. In particular, the composition of differential for successive parts of a cipher should be done very carefully to lead to an attack. This revised version of the paper includes the exact computations of some probabilities and repairs the attack of the first half of Skipjack.

Metadata
Available format(s)
PS
Category
Secret-key cryptography
Publication info
Published elsewhere. FSE'01 proceedings, LNCS, Springer, 2001.
Keywords
block cipherscryptanalysis
Contact author(s)
Louis Granboulan @ ens fr
History
2001-05-13: received
Short URL
https://ia.cr/2001/038
License
Creative Commons Attribution
CC BY

BibTeX

@misc{cryptoeprint:2001/038,
      author = {Louis Granboulan},
      title = {Flaws in differential cryptanalysis of Skipjack},
      howpublished = {Cryptology {ePrint} Archive, Paper 2001/038},
      year = {2001},
      url = {https://eprint.iacr.org/2001/038}
}
Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.