TY - JOUR
T1 - Weakness of lightweight block ciphers mCrypton and LED against biclique cryptanalysis
AU - Jeong, Kitae
AU - Kang, Hyung Chul
AU - Lee, Changhoon
AU - Sung, Jaechul
AU - Hong, Seokhie
AU - Lim, Jong In
N1 - Publisher Copyright:
© 2013, Springer Science+Business Media New York.
PY - 2015/7/20
Y1 - 2015/7/20
N2 - In this paper, we evaluate the security of lightweight block ciphers mCrypton and LED against biclique cryptanalysis. In cases of mCryton-64/96/128, our attacks require computational complexities of $2^{63.18}, 2^{94.81}$ and $2^{126.56}$, respectively. These results are the first known biclique cryptanalytic results on mCrypton. The attack on a 29-round reduced LED-64 needs $2^{63.58}$ 29-round reduced LED-64 encryptions. In the cases of LED-80/96/128, we propose the attacks on two versions. First, to recover the secret key of 45-round reduced LED-80/96/128, our attacks require computational complexities of $2^{79.45}, 2^{95.45}$ and $2^{127.45}$, respectively. To attack the full version, we require computational complexities of $2^{79.37}, 2^{95.37}$ and $2^{127.37}$, respectively. However, in these cases, we need the full codebook. These results are superior to known biclique cryptanalytic results on LED.
AB - In this paper, we evaluate the security of lightweight block ciphers mCrypton and LED against biclique cryptanalysis. In cases of mCryton-64/96/128, our attacks require computational complexities of $2^{63.18}, 2^{94.81}$ and $2^{126.56}$, respectively. These results are the first known biclique cryptanalytic results on mCrypton. The attack on a 29-round reduced LED-64 needs $2^{63.58}$ 29-round reduced LED-64 encryptions. In the cases of LED-80/96/128, we propose the attacks on two versions. First, to recover the secret key of 45-round reduced LED-80/96/128, our attacks require computational complexities of $2^{79.45}, 2^{95.45}$ and $2^{127.45}$, respectively. To attack the full version, we require computational complexities of $2^{79.37}, 2^{95.37}$ and $2^{127.37}$, respectively. However, in these cases, we need the full codebook. These results are superior to known biclique cryptanalytic results on LED.
KW - Biclique
KW - Block cipher
KW - Cryptanalysis
KW - LED
KW - mCrypton
UR - http://www.scopus.com/inward/record.url?scp=84934952272&partnerID=8YFLogxK
U2 - 10.1007/s12083-013-0208-4
DO - 10.1007/s12083-013-0208-4
M3 - Article
AN - SCOPUS:84934952272
SN - 1936-6442
VL - 8
SP - 716
EP - 732
JO - Peer-to-Peer Networking and Applications
JF - Peer-to-Peer Networking and Applications
IS - 4
ER -