Paper 2018/390 Original: eprint.iacr.org/2018/390 ↗
MILP-based Differential Attack on Round-reduced GIFT
Abstract
At Asiacrypt 2014, Sun et al. proposed a MILP model to search for differential characteristics of bit-oriented block ciphers. In this paper, we improve this model to search for differential characteristics of GIFT, a new lightweight block cipher proposed at CHES 2017. GIFT has two versions, namely GIFT-64 and GIFT-128. For GIFT-64, we find the best 12-round differential characteristic and a number of iterative 4-round differential characteristics with our MILP-based model. We give a key-recovery attack on 19-round GIFT-64. For GIFT-128, we find a 18-round differential characteristic and give the first attack on 22-round GIFT-128.
Metadata
- Available format(s)
PDF- Category
- Secret-key cryptography
- Publication info
- Preprint.
- History
- 2019-06-06: last updated
- 2018-05-01: published
- Short URL
- https://ia.cr/2018/390
- License
- https://creativecommons.org/licenses/by/4.0/
BibTeX
@misc{cryptoeprint:2018/390,
author = {Baoyu Zhu and Xiaoyang Dong and Hongbo Yu},
title = {MILP-based Differential Attack on Round-reduced GIFT},
howpublished = {Cryptology {ePrint} Archive, Paper 2018/390},
year = {2018},
url = {https://eprint.iacr.org/2018/390}
}