Paper 2012/163 Original: eprint.iacr.org/2012/163 ↗
Differential propagation analysis of Keccak
Abstract
In this paper we introduce new concepts that help read and understand low-weight differential trails in Keccak. We then propose efficient techniques to exhaustively generate all 3-round trails in its largest permutation below a given weight. This allows us to prove that any 6-round differential trail in Keccak-f[1600] has weight at least 74. In the worst-case diffusion scenario where the mixing layer acts as the identity, we refine the lower bound to 82 by systematically constructing trails using a specific representation of states.
Metadata
- Available format(s)
PDF- Publication info
- Preprint.
- History
- 2012-04-26: last updated
- 2012-03-28: published
- Short URL
- https://ia.cr/2012/163
- License
- https://creativecommons.org/licenses/by/4.0/
BibTeX
@misc{cryptoeprint:2012/163,
author = {Joan Daemen and Gilles Van Assche},
title = {Differential propagation analysis of Keccak},
howpublished = {Cryptology {ePrint} Archive, Paper 2012/163},
year = {2012},
url = {https://eprint.iacr.org/2012/163}
}