TY - GEN
T1 - Security analysis of the keyschedule of ARIA-128
AU - Kang, Hyungchul
AU - Lee, Yuseop
AU - Jeong, Kitae
AU - Sung, Jaechul
AU - Hong, Seokhie
PY - 2012
Y1 - 2012
N2 - A Korean standard block cipher ARIA is a 128-bit block cipher supporting 128-, 192- and 256-bit secret keys. It is well known that an attacker should obtain at least four consecutive round keys or particular two round keys in order to recover the secret key of ARIA-128. In this paper, we propose the method to recover the secret key by using only the last round key. The proposed method is based on a guess-and-determine attack, which requires the computational complexity of . To our knowledge, this result did not introduced so far.
AB - A Korean standard block cipher ARIA is a 128-bit block cipher supporting 128-, 192- and 256-bit secret keys. It is well known that an attacker should obtain at least four consecutive round keys or particular two round keys in order to recover the secret key of ARIA-128. In this paper, we propose the method to recover the secret key by using only the last round key. The proposed method is based on a guess-and-determine attack, which requires the computational complexity of . To our knowledge, this result did not introduced so far.
KW - ARIA-128
KW - Block cipher
KW - Guess-and-determine attack
KW - Keyschedule
UR - http://www.scopus.com/inward/record.url?scp=84868544569&partnerID=8YFLogxK
U2 - 10.1007/978-94-007-5699-1_25
DO - 10.1007/978-94-007-5699-1_25
M3 - Conference contribution
AN - SCOPUS:84868544569
SN - 9789400756984
T3 - Lecture Notes in Electrical Engineering
SP - 243
EP - 251
BT - Computer Science and Its Applications, CSA 2012
T2 - 4th FTRA International Conference on Computer Science and Its Applications, CSA 2012
Y2 - 22 November 2012 through 25 November 2012
ER -