Paper 2020/005

Lai-Massey Scheme Revisited

M. R. Mirzaee Shamsabad and S. M. Dehnavi


Lai-Massey scheme is a well-known block cipher structure which has been used in the design of the ciphers PES, IDEA, WIDEA, FOX and MESH. Recently, the lightweight block cipher FLY applied this structure in the construction of a lightweight $8 \times 8$ S-box from $4 \times 4$ ones. In the current paper, firstly we investigate the linear, differential and algebraic properties of the general form of S-boxes used in FLY, mathematically. Then, based on this study, a new cipher structure is proposed which we call generalized Lai-Massey scheme or GLM. We give upper bounds for the maximum average differential probability (MADP) and maximum average linear hull (MALH) of GLM and after examination of impossible differentials and zero-correlations of one round of this structure, we show that two rounds of GLM do not have any structural impossible differentials or zero-correlations. As a measure of structural security, we prove the pseudo-randomness of GLM by the H-coefficient method.

Available format(s)
Secret-key cryptography
Publication info
Preprint. MINOR revision.
Generalized Lai-Massey SchemeS-boxSymmetric CipherH-coefficient MethodMADPMALH.
Contact author(s)
std_dehnavism @ khu ac ir
2020-01-03: received
Short URL
Creative Commons Attribution


      author = {M.  R.  Mirzaee Shamsabad and S.  M.  Dehnavi},
      title = {Lai-Massey Scheme Revisited},
      howpublished = {Cryptology ePrint Archive, Paper 2020/005},
      year = {2020},
      note = {\url{}},
      url = {}
Note: In order to protect the privacy of readers, does not use cookies or embedded third party content.