Abstract
A related-key differential cryptanalysis is applied to the 192-bit key variant of AES. Although any 4-round differential trail has at least 25 active bytes, one can construct 5-round related-key differential trail that has only 15 active bytes and break six rounds with 2106 plaintext/ciphertext pairs and complexity 2112. The attack can be improved using truncated differentials. In this case, the number of required plaintext/ciphertext pairs is 281 and the complexity is about 286. Using impossible related-key differentials we can break seven rounds with 2111 plaintext/ciphertext pairs and computational complexity 2116. The attack on eight rounds requires 288 plaintext/ciphertext pairs and its complexity is about 2183 encryptions. In the case of differential cryptanalysis, if the iterated cipher is Markov cipher and the round keys are independent, then the sequence of differences at each round output forms a Markov chain and the cipher becomes resistant to differential cryptanalysis after sufficiently many rounds, but this is not true in the case of related-key differentials. It can be shown that if in addition the Markov cipher has K-f round function and the hypothesis of stochastic equivalence for related keys holds, then the iterated cipher is resistant to related-key differential attacks after sufficiently many rounds.
A part of this research was funded by NSF CCR-0109425.
Chapter PDF
Similar content being viewed by others
References
Advanced Encryption Standard (AES), FIPS Publication 197 (November 26, 2001), available at http://csrc.nist.gov/encryption/aes
Biham, E., Shamir, A.: Differential cryptanalysis of DES-like cryptosystems. Journal of Cryptology 4(1), 3–72 (1991)
Biham, E., Shamir, A.: Differential Cryptanalysis of Snefru, Khafre, REDOC II, LOKI, and Lucifer. In: Feigenbaum, J. (ed.) CRYPTO 1991. LNCS, vol. 576, pp. 156–171. Springer, Heidelberg (1992)
Biham, E.: New Types of Cryptanalytic Attacks Using Related Keys. Journal of Cryptology 7(4), 229–246 (1994)
Biham, E., Biryukov, A., Ferguson, N., Knudsen, L., Schneier, B., Shamir, A.: Cryptanalysis of MAGENTA, http://csrc.nist.gov/encryption/aes/round1/conf2/aes2conf.htm
Biham, E., Keller, N.: Cryptanalysis of Reduced Variants of Rijndael, http://csrc.nist.gov/encryption/aes/round2/conf3/aes3papers.html
Cheon, J., Kim, M., Kim, K., Lee, J., Kang, S.: Improved Impossible Differential Cryptanalysis of Rijndael and Crypton. In: Kim, K.-c. (ed.) ICISC 2001. LNCS, vol. 2288, p. 39. Springer, Heidelberg (2002)
Daemen, J., Rijmen, V.: AES Proposal: Rijndael, http://csrc.nist.gov/encryption/aes
Daemen, J.: Cipher and hash function design strategies based on linear and differential cryptanalysis. Doctoral Dissertation, K.U.Leuven (March 1995)
Ferguson, N., Kelsey, J., Schneier, B., Stay, M., Wagner, D., Whiting, D.: Improved Cryptanalysis of Rijndael. In: Schneier, B. (ed.) FSE 2000. LNCS, vol. 1978, p. 213. Springer, Heidelberg (2001)
Jacobson Jr., M.J., Huber, K.: The MAGENTA Block Cipher Algorithm. AES candidate, http:// csrc.nist.gov/encryption/aes
Kelsey, J., Schneier, B., Wagner, D.: Key-schedule cryptanalysis of IDEA, GDES, GOST, SAFER, and Triple-DES. In: Koblitz, N. (ed.) CRYPTO 1996. LNCS, vol. 1109, pp. 237–252. Springer, Heidelberg (1996)
Knudsen, L.R.: Truncated and Higher Order Differentials. In: Fast Software Encryption, 2nd International Workshop Proceedings, pp. 196–211. Springer, Heidelberg (1995)
Lai, X.: Higher Order Derivations and Differential Cryptanalysis. In: Communications and Cryptography: Two Sides of One Tapestry, pp. 227–233. Kluwer Academic Publishers, Dordrecht (1994)
Lai, X., Massey, J., Murphy, S.: Markov Ciphers and Differential Cryptanalysis. In: CRYPTO 1991, pp. 17–38. Springer, Heidelberg (1991)
Quisquater, J.-J., Samyde, D.: Eddy current for Magnetic Analysis with Active Sensor. In: Proceedings of Esmart 2002, 3rd edn., Nice, France (September 2002)
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2004 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Jakimoski, G., Desmedt, Y. (2004). Related-Key Differential Cryptanalysis of 192-bit Key AES Variants. In: Matsui, M., Zuccherato, R.J. (eds) Selected Areas in Cryptography. SAC 2003. Lecture Notes in Computer Science, vol 3006. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-540-24654-1_15
Download citation
DOI: https://doi.org/10.1007/978-3-540-24654-1_15
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-540-21370-3
Online ISBN: 978-3-540-24654-1
eBook Packages: Springer Book Archive