Cryptology ePrint Archive: Report 2007/408

Differential Cryptanalysis of PRESENT

Meiqin Wang

Abstract: PRESENT is proposed by A.Bogdanov et al. in CHES 2007 for extremely constrained environments such as RFID tags and sensor networks. In this paper, we find out the differential characteristics for r-round($5 \leq r \leq 15$), then give the differential cryptanalysis on reduced-round variants of PRESENT. We attack 16-round PRESENT using $2^{64}$ chosen plaintexts, $2^{32}$ 6-bit counters, and $2^{65}$ memory accesses.

Category / Keywords: Differential Cryptanalysis, Present, RFID, Block Cipher

Date: received 25 Oct 2007, last revised 9 Jan 2008

Contact author: mqwang at sdu edu cn

Available format(s): PDF | BibTeX Citation

Note: In Table 1 of page 6, x2=5 should be x3=5 in R10 and R14.

Version: 20080109:193315 (All versions of this report)

Short URL: ia.cr/2007/408

Discussion forum: Show discussion | Start new discussion