Impossible differential cryptanalysis of zodiac

Deukjo Hong, Jaechul Sung, Shiho Moriai, Sangjin Lee, Jongin Lim

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

10 Scopus citations


We discuss the impossible differential cryptanalysis of the blockcipher Zodiac [7]. The main design principles of Zodiac are simplicity and efficiency. However the diffusion layer in its round function is too simple to offer enough security. An impossible differential cryptanalysis is a proper method to attackthe weakness of Zodiac. Our attack using two 14-round impossible characteristics derives 128-bit master key of the full 16-round Zodiac with its complexity 2119 encryption times faster than the exhaustive search. The efficiency of the attackcompared with exhaustive search increases as the key size increases.

Original languageEnglish
Title of host publicationFast Software Encryption - 8th International Workshop, FSE 2001, Revised Papers
EditorsMitsuru Matsui
PublisherSpringer Verlag
Number of pages12
ISBN (Print)3540438696, 9783540438694
StatePublished - 2002
Event8th International Workshop on Fast Software Encryption, FSE 2001 - Yokohama, Japan
Duration: 2 Apr 20014 Apr 2001

Publication series

NameLecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
ISSN (Print)0302-9743
ISSN (Electronic)1611-3349


Conference8th International Workshop on Fast Software Encryption, FSE 2001


Dive into the research topics of 'Impossible differential cryptanalysis of zodiac'. Together they form a unique fingerprint.

Cite this