Paper 2019/951 Original: eprint.iacr.org/2019/951 ↗
Collisions on Feistel-MiMC and univariate GMiMC
Abstract
MiMC and GMiMC are families of MPC-friendly block ciphers and hash functions. In this note, we show that the block ciphers MiMC-$2n/n$ (or Feistel-MiMC) and univariate GMiMC are vulnerable to an attack which allows a key recovery in $2^{n/2}$ operations. This attack, which is reminiscent of a slide attack, only relies on their weak key schedules, and is independent of the round function ($x^3$ here) and the number of rounds.
Metadata
- Available format(s)
PDF- Category
- Secret-key cryptography
- Publication info
- Preprint.
- History
- 2019-08-21: last updated
- 2019-08-21: published
- Short URL
- https://ia.cr/2019/951
- License
- https://creativecommons.org/licenses/by/4.0/
BibTeX
@misc{cryptoeprint:2019/951,
author = {Xavier Bonnetain},
title = {Collisions on Feistel-MiMC and univariate GMiMC},
howpublished = {Cryptology {ePrint} Archive, Paper 2019/951},
year = {2019},
url = {https://eprint.iacr.org/2019/951}
}