Paper 2015/964

Improved Linear (hull) Cryptanalysis of Round-reduced Versions of KATAN

Danping Shi, Lei Hu, Siwei Sun, and Ling Song


KATAN is a family of block ciphers published at CHES 2009. Based on the Mixed-integer linear programming (MILP) technique, we propose the first third-party linear cryptanalysis on KATAN. Furthermore, we evaluate the security of KATAN against the linear attack without ignoring the dependence of the input bits of the $2\times 1$ S-box(the AND operation). Note that in previous analysis, the dependence is not considered, and therefore the previous results are not accurate. Furthermore, the mounted 131/120-round attack on KATAN32/48 respectively by our 84/90-round linear hull is the best single-key known-plaintext attack. In addition, a best 94-round linear hull attack is mounted on KATAN64 by our 76-round linear hull.

Available format(s)
Publication info
Preprint. Minor revision.
KATANMixed-integer linear programminglinear hulldependence
Contact author(s)
shidanping @ iie ac cn
2015-11-21: last of 2 revisions
2015-10-08: received
See all versions
Short URL
Creative Commons Attribution


      author = {Danping Shi and Lei Hu and Siwei Sun and Ling Song},
      title = {Improved Linear (hull) Cryptanalysis of Round-reduced Versions of KATAN},
      howpublished = {Cryptology ePrint Archive, Paper 2015/964},
      year = {2015},
      note = {\url{}},
      url = {}
Note: In order to protect the privacy of readers, does not use cookies or embedded third party content.