Integral Cryptanalysis on Reduced-Round KASUMI

Nobuyuki SUGIO; Yasutaka IGARASHI; Sadayuki HONGO

doi:10.1587/transfun.2021EAP1124

Integral Cryptanalysis on Reduced-Round KASUMI

Nobuyuki SUGIO, Yasutaka IGARASHI, Sadayuki HONGO

Full Text Views

0

Cite this

Summary :

Integral cryptanalysis is one of the most powerful attacks on symmetric key block ciphers. Attackers preliminarily search integral characteristics of a target cipher and use them to perform the key recovery attack. Todo proposed a novel technique named the bit-based division property to find integral characteristics. Xiang et al. extended the Mixed Integer Linear Programming (MILP) method to search integral characteristics of lightweight block ciphers based on the bit-based division property. In this paper, we apply these techniques to the symmetric key block cipher KASUMI which was developed by modifying MISTY1. As a result, we found new 4.5-round characteristics of KASUMI for the first time. We show that 7-round KASUMI is attackable with 2⁶³ data and 2¹²⁰ encryptions.

Publication: IEICE TRANSACTIONS on Fundamentals Vol.E105-A No.9 pp.1309-1316

Publication Date: 2022/09/01

Publicized: 2022/04/22

Online ISSN: 1745-1337

DOI: 10.1587/transfun.2021EAP1124

Type of Manuscript: PAPER

Category: Cryptography and Information Security

Authors

Nobuyuki SUGIO
  Hokkaido University of Science
Yasutaka IGARASHI
  the Tokyo University of Science
Sadayuki HONGO
  Hokkaido University of Science

Keyword

block cipher, integral cryptanalysis, bit-based division property, KASUMI

Cite this

Copy

Nobuyuki SUGIO, Yasutaka IGARASHI, Sadayuki HONGO, "Integral Cryptanalysis on Reduced-Round KASUMI" in IEICE TRANSACTIONS on Fundamentals, vol. E105-A, no. 9, pp. 1309-1316, September 2022, doi: 10.1587/transfun.2021EAP1124.
Abstract: Integral cryptanalysis is one of the most powerful attacks on symmetric key block ciphers. Attackers preliminarily search integral characteristics of a target cipher and use them to perform the key recovery attack. Todo proposed a novel technique named the bit-based division property to find integral characteristics. Xiang et al. extended the Mixed Integer Linear Programming (MILP) method to search integral characteristics of lightweight block ciphers based on the bit-based division property. In this paper, we apply these techniques to the symmetric key block cipher KASUMI which was developed by modifying MISTY1. As a result, we found new 4.5-round characteristics of KASUMI for the first time. We show that 7-round KASUMI is attackable with 2⁶³ data and 2¹²⁰ encryptions.
URL: https://global.ieice.org/en_transactions/fundamentals/10.1587/transfun.2021EAP1124/_p

Copy

@ARTICLE{e105-a_9_1309,
author={Nobuyuki SUGIO, Yasutaka IGARASHI, Sadayuki HONGO, },
journal={IEICE TRANSACTIONS on Fundamentals},
title={Integral Cryptanalysis on Reduced-Round KASUMI},
year={2022},
volume={E105-A},
number={9},
pages={1309-1316},
abstract={Integral cryptanalysis is one of the most powerful attacks on symmetric key block ciphers. Attackers preliminarily search integral characteristics of a target cipher and use them to perform the key recovery attack. Todo proposed a novel technique named the bit-based division property to find integral characteristics. Xiang et al. extended the Mixed Integer Linear Programming (MILP) method to search integral characteristics of lightweight block ciphers based on the bit-based division property. In this paper, we apply these techniques to the symmetric key block cipher KASUMI which was developed by modifying MISTY1. As a result, we found new 4.5-round characteristics of KASUMI for the first time. We show that 7-round KASUMI is attackable with 2⁶³ data and 2¹²⁰ encryptions.},
keywords={},
doi={10.1587/transfun.2021EAP1124},
ISSN={1745-1337},
month={September},}

Copy

TY - JOUR
TI - Integral Cryptanalysis on Reduced-Round KASUMI
T2 - IEICE TRANSACTIONS on Fundamentals
SP - 1309
EP - 1316
AU - Nobuyuki SUGIO
AU - Yasutaka IGARASHI
AU - Sadayuki HONGO
PY - 2022
DO - 10.1587/transfun.2021EAP1124
JO - IEICE TRANSACTIONS on Fundamentals
SN - 1745-1337
VL - E105-A
IS - 9
JA - IEICE TRANSACTIONS on Fundamentals
Y1 - September 2022
AB - Integral cryptanalysis is one of the most powerful attacks on symmetric key block ciphers. Attackers preliminarily search integral characteristics of a target cipher and use them to perform the key recovery attack. Todo proposed a novel technique named the bit-based division property to find integral characteristics. Xiang et al. extended the Mixed Integer Linear Programming (MILP) method to search integral characteristics of lightweight block ciphers based on the bit-based division property. In this paper, we apply these techniques to the symmetric key block cipher KASUMI which was developed by modifying MISTY1. As a result, we found new 4.5-round characteristics of KASUMI for the first time. We show that 7-round KASUMI is attackable with 2⁶³ data and 2¹²⁰ encryptions.
ER -