Paper 2018/688

Finding Integral Distinguishers with Ease

Zahra Eskandari, Andreas Brasen Kidmose, Stefan Kölbl, and Tyge Tiessen


The division property method is a technique to determine integral distinguishers on block ciphers. While the complexity of finding these distinguishers is higher, it has recently been shown that MILP and SAT solvers can efficiently find such distinguishers. In this paper, we provide a framework to automatically find those distinguishers which solely requires a description of the cryptographic primitive. We demonstrate that by finding integral distinguishers for 30 primitives with different design strategies. We provide several new or improved bit-based division property distinguishers for ChaCha, Chaskey, DES, GIFT, LBlock, Mantis, Qarma, RoadRunner, Salsa and SM4. Furthermore, we present an algorithm to find distinguishers with lower data complexity more efficiently.

Note: Correction in Appendix for ChaCha distinguisher.

Available format(s)
Secret-key cryptography
Publication info
Published elsewhere. SAC 2018
Integral AttacksDivision PropertyTool
Contact author(s)
stek @ mailbox org
2018-07-19: revised
2018-07-18: received
See all versions
Short URL
Creative Commons Attribution


      author = {Zahra Eskandari and Andreas Brasen Kidmose and Stefan Kölbl and Tyge Tiessen},
      title = {Finding Integral Distinguishers with Ease},
      howpublished = {Cryptology ePrint Archive, Paper 2018/688},
      year = {2018},
      note = {\url{}},
      url = {}
Note: In order to protect the privacy of readers, does not use cookies or embedded third party content.