Related-key attacks on DDP based ciphers: CIKS-128 and CIKS-128H

Youngdai Ko, Changhoon Lee, Seokhie Hong, Jaechul Sung, Sangjin Lee

Research output: Contribution to journalArticlepeer-review

21 Scopus citations


CIKS-128 and CIKS-128H are 128-bit block ciphers with a 256-bit key sizes based on data-dependent operations, respectively. They are also fast hardware-oriented ciphers and improvements of block cipher CIKS-1 introduced in [14]. This paper presents related-key differential attacks on full-round CIKS-128 and CIKS-128H. In result, using full-round related-key differential characteristics with probability 2-36 and 2-35.4, these attacks can recover the partial subkey bits for CIKS-128 and CIKS-128H with about 240 plaintexts, respectively. These works suggests that the greatest possible care has to be taken when proposing improvements of the existing block ciphers.


  • Block Cipher
  • CIKS-128
  • CIKS-128H
  • Data-Dependent Operation
  • Related-Key Differential Attack


Dive into the research topics of 'Related-key attacks on DDP based ciphers: CIKS-128 and CIKS-128H'. Together they form a unique fingerprint.

Cite this