Paper 2013/301

Impossible Differential-Linear Cryptanalysis of Reduced-Round CLEFIA-128

Zheng Yuan, Xian Li, and Bart Preneel


CLEFIA is a 128-bit block cipher proposed by Sony Corporation in 2007. Our paper introduces a new chosen text attack, the impossible differential-linear attack, on iterated cryptosystems. The attack is efficient for $16$-round CLEFIA with whitening keys. In the paper, we construct a $13$-round impossible differential-linear distinguisher. Based on the distinguisher, we present an effective attack on 16-round CLEFIA-$128$ with data complexity of $2^{122.73}$, recovering $96$-bit subkeys in total. Our attack can also be applied to CLEFIA-192 and CLEFIA-$256$.

Note: We complement the third chapter, that is say, we introduced in detail our attack thoughts.

Available format(s)
Publication info
Preprint. MINOR revision.
CLEFIAimpossible differential cryptanalysislinear approximation.
Contact author(s)
zyuan @ tsinghua edu cn
2020-10-08: last of 6 revisions
2013-05-25: received
See all versions
Short URL
Creative Commons Attribution


      author = {Zheng Yuan and Xian Li and Bart Preneel},
      title = {Impossible Differential-Linear Cryptanalysis of Reduced-Round {CLEFIA}-128},
      howpublished = {Cryptology ePrint Archive, Paper 2013/301},
      year = {2013},
      note = {\url{}},
      url = {}
Note: In order to protect the privacy of readers, does not use cookies or embedded third party content.