Security analysis of the full-round DDO-64 block cipher

Changhoon Lee; Jongsung Kim; Seokhie Hong; Jaechul Sung; Sangjin Lee

doi:10.1016/j.jss.2008.04.039

Security analysis of the full-round DDO-64 block cipher

Changhoon Lee, Jongsung Kim, Seokhie Hong, Jaechul Sung, Sangjin Lee

Department of Mathematics

Korea University

Research output: Contribution to journal › Article › peer-review

10 Scopus citations

Abstract

DDO-64 is a 64-bit Feistel-like block cipher based on data-dependent operations (DDOs). It is composed of 8 rounds and uses a 128-bit key. There are two versions of DDO-64, named DDO-64V₁ and DDO-64V₂, according to the key schedule. They were designed under an attempt for improving the security and performance of DDP-based ciphers. In this paper, however, we show that like most of the existing DDP-based ciphers, DDO-64V₁ and DDO-64V₂ are also vulnerable to related-key attacks. The attack on DDO-64V₁ requires 2^35.5 related-key chosen plaintexts and 2^63.5 encryptions while the attack on DDO-64V₂ only needs 8 related-key chosen plaintexts and 2³¹ encryptions; our attacks are both mainly due to their simple key schedules and structural weaknesses. These works are the first known cryptanalytic results on DDO-64V₁ and DDO-64V₂ so far.

Original language	English
Pages (from-to)	2328-2335
Number of pages	8
Journal	Journal of Systems and Software
Volume	81
Issue number	12
DOIs	https://doi.org/10.1016/j.jss.2008.04.039
State	Published - Dec 2008

Keywords

Block cipher
Boomerang attack
Cryptography
Data-dependent operation
Differential attack
Related-key attack

Access to Document

10.1016/j.jss.2008.04.039

Cite this

@article{56d58ea1e4724115a62c967515b88cdc,

title = "Security analysis of the full-round DDO-64 block cipher",

abstract = "DDO-64 is a 64-bit Feistel-like block cipher based on data-dependent operations (DDOs). It is composed of 8 rounds and uses a 128-bit key. There are two versions of DDO-64, named DDO-64V1 and DDO-64V2, according to the key schedule. They were designed under an attempt for improving the security and performance of DDP-based ciphers. In this paper, however, we show that like most of the existing DDP-based ciphers, DDO-64V1 and DDO-64V2 are also vulnerable to related-key attacks. The attack on DDO-64V1 requires 235.5 related-key chosen plaintexts and 263.5 encryptions while the attack on DDO-64V2 only needs 8 related-key chosen plaintexts and 231 encryptions; our attacks are both mainly due to their simple key schedules and structural weaknesses. These works are the first known cryptanalytic results on DDO-64V1 and DDO-64V2 so far.",

keywords = "Block cipher, Boomerang attack, Cryptography, Data-dependent operation, Differential attack, Related-key attack",

author = "Changhoon Lee and Jongsung Kim and Seokhie Hong and Jaechul Sung and Sangjin Lee",

year = "2008",

month = dec,

doi = "10.1016/j.jss.2008.04.039",

language = "English",

volume = "81",

pages = "2328--2335",

journal = "Journal of Systems and Software",

issn = "0164-1212",

publisher = "Elsevier Inc.",

number = "12",

}

TY - JOUR

T1 - Security analysis of the full-round DDO-64 block cipher

AU - Lee, Changhoon

AU - Kim, Jongsung

AU - Hong, Seokhie

AU - Sung, Jaechul

AU - Lee, Sangjin

PY - 2008/12

Y1 - 2008/12

N2 - DDO-64 is a 64-bit Feistel-like block cipher based on data-dependent operations (DDOs). It is composed of 8 rounds and uses a 128-bit key. There are two versions of DDO-64, named DDO-64V1 and DDO-64V2, according to the key schedule. They were designed under an attempt for improving the security and performance of DDP-based ciphers. In this paper, however, we show that like most of the existing DDP-based ciphers, DDO-64V1 and DDO-64V2 are also vulnerable to related-key attacks. The attack on DDO-64V1 requires 235.5 related-key chosen plaintexts and 263.5 encryptions while the attack on DDO-64V2 only needs 8 related-key chosen plaintexts and 231 encryptions; our attacks are both mainly due to their simple key schedules and structural weaknesses. These works are the first known cryptanalytic results on DDO-64V1 and DDO-64V2 so far.

AB - DDO-64 is a 64-bit Feistel-like block cipher based on data-dependent operations (DDOs). It is composed of 8 rounds and uses a 128-bit key. There are two versions of DDO-64, named DDO-64V1 and DDO-64V2, according to the key schedule. They were designed under an attempt for improving the security and performance of DDP-based ciphers. In this paper, however, we show that like most of the existing DDP-based ciphers, DDO-64V1 and DDO-64V2 are also vulnerable to related-key attacks. The attack on DDO-64V1 requires 235.5 related-key chosen plaintexts and 263.5 encryptions while the attack on DDO-64V2 only needs 8 related-key chosen plaintexts and 231 encryptions; our attacks are both mainly due to their simple key schedules and structural weaknesses. These works are the first known cryptanalytic results on DDO-64V1 and DDO-64V2 so far.

KW - Block cipher

KW - Boomerang attack

KW - Cryptography

KW - Data-dependent operation

KW - Differential attack

KW - Related-key attack

UR - http://www.scopus.com/inward/record.url?scp=54049122177&partnerID=8YFLogxK

U2 - 10.1016/j.jss.2008.04.039

DO - 10.1016/j.jss.2008.04.039

M3 - Article

AN - SCOPUS:54049122177

SN - 0164-1212

VL - 81

SP - 2328

EP - 2335

JO - Journal of Systems and Software

JF - Journal of Systems and Software

IS - 12

ER -

Security analysis of the full-round DDO-64 block cipher

Abstract

Keywords

Access to Document

Other files and links

Fingerprint

Cite this