Cryptology ePrint Archive: Report 2009/489

Impossible Boomerang Attack for Block Cipher Structures

Jiali Choy and Huihui Yap

Abstract: Impossible boomerang attack \cite{lu} (IBA) is a new variant of differential cryptanalysis against block ciphers. Evident from its name, it combines the ideas of both impossible differential cryptanalysis and boomerang attack. Though such an attack might not be the best attack available, its complexity is still less than that of the exhaustive search. In impossible boomerang attack, impossible boomerang distinguishers are used to retrieve some of the subkeys. Thus the security of a block cipher against IBA can be evaluated by impossible boomerang distinguishers. In this paper, we study the impossible boomerang distinguishers for block cipher structures whose round functions are bijective. Inspired by the $\mathcal{U}$-method in \cite{kim}, we provide an algorithm to compute the maximum length of impossible boomerang distinguishers for general block cipher structures, and apply the algorithm to known block cipher structures such as Nyberg's generalized Feistel network, a generalized CAST256-like structure, a generalized MARS-like structure, a generalized RC6-like structure, etc.

Category / Keywords: secret-key cryptography / Block Ciphers, Impossible Boomerang Attack, Impossible Boomerang Distinguishers

Publication Info: Updated version of the paper accepted by IWSEC 2009

Date: received 5 Oct 2009, last revised 5 Oct 2009

Contact author: yhuihui at dso org sg

Available format(s): PDF | BibTeX Citation

Version: 20091006:031650 (All versions of this report)

Short URL:

Discussion forum: Show discussion | Start new discussion

[ Cryptology ePrint archive ]