Paper 2025/1401

Automated Tool for Meet-in-the-Middle Attacks with Very Low Data and Memory Complexity (Full Version)

Mohammad Vaziri
Abstract

In this paper, we present a simple meet-in-the-middle attack that requires low data and memory resources. To evaluate the complexity of the attack, we also propose an automated tool that calculates the time, data, and memory complexities based on the suggested matching points. Our method operates at the bit level and employs a known-plaintext attack, with no constraints on the attacker's choice of data. We apply our tool on various lightweight block ciphers, including CRAFT, Midori, WARP, PRESENT, and ARADI. For CRAFT, our tool successfully identified an attack targeting 15 rounds using 3 known plaintexts. In the case of Midori64 and Midori128, the tool proposed attacks on 5 rounds with 16 known plaintexts and 7 rounds with 3 known plaintexts, respectively. For WARP, the tool discovered an attack on 18 rounds utilizing 7 known plaintexts. Additionally, for PRESENT80, the tool identified an attack on 6 rounds with 18 known plaintexts, and for ARADI, an attack on 5 rounds with 28 known plaintexts was determined.

Metadata
Available format(s)
PDF
Category
Attacks and cryptanalysis
Publication info
Published elsewhere. Minor revision. 6th International Workshop on LIGHTWEIGHT CRYPTOGRAPHY FOR SECURITY and PRIVACY 2025
Keywords
MITM AttacksAutomated ToolsLightweight CryptographyKey-recovery Attacks
Contact author(s)
mohammad vaziri @ ed ac uk
History
2025-08-04: last of 2 revisions
2025-08-01: received
See all versions
Short URL
https://ia.cr/2025/1401
License
Creative Commons Attribution
CC BY

BibTeX

@misc{cryptoeprint:2025/1401,
      author = {Mohammad Vaziri},
      title = {Automated Tool for Meet-in-the-Middle Attacks with Very Low Data and Memory Complexity (Full Version)},
      howpublished = {Cryptology {ePrint} Archive, Paper 2025/1401},
      year = {2025},
      url = {https://eprint.iacr.org/2025/1401}
}
Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.