Cryptology ePrint Archive: Report 2012/570

Zero-Correlation Linear Cryptanalysis of Reduced-Round LBlock

Hadi Soleimany and Kaisa Nyberg

Abstract: Zero-correlation linear attack is a new method for cryptanalysis of block ciphers developed by Bogdanov et al. in 2012. In this paper we adapt the matrix method to find zero-correlation linear approximations. Then we present several zero-correlation linear approximations for 14 rounds of LBlock and describe a cryptanalysis for 22 rounds of the reduced LBlock. After biclique attacks on LBlock revealed weaknesses in its key schedule, its designers presented a new version of the cipher with a revised key schedule. The attack presented in this paper is applicable to LBlock structure independently of the key scheduling. The attack needs distinct known plaintexts which is a more realistic attack model in comparison with impossible differential cryptanalysis which uses chosen plaintext pairs. Moreover, we performed simulations on a small variant LBlock and present the first experimental results on the theoretical model of the multidimensional zero-correlation linear cryptanalysis method.

Category / Keywords: block cipher, zero-correlation linear cryptanalysis, LBlock, matrix method

Date: received 5 Oct 2012, last revised 23 Dec 2012

Contact author: hadi soleimany at aalto fi

Available format(s): PDF | BibTeX Citation

Note: The experimental results are added.

Version: 20121223:153028 (All versions of this report)

Discussion forum: Show discussion | Start new discussion


[ Cryptology ePrint archive ]