The Problem of Half Round Key XOR

Anubhab Baksi

Paper 2023/730 Original: eprint.iacr.org/2023/730 ↗

The Problem of Half Round Key XOR

Anubhab Baksi

Abstract

In the design of GIFT, half round key XOR is used. This leads to the undesired consequence that the security against the differential/linear attacks are overestimated. This comes from the observation that; in the usual DDT/LAT based analysis of the differential/linear attacks, the inherent assumption is the full round key is XORed at each round.

Metadata

Available format(s): PDF
Category: Secret-key cryptography
Publication info: Preprint.
History: 2023-05-24: last updated; 2023-05-21: published
Short URL: https://ia.cr/2023/730
License: https://creativecommons.org/licenses/by-nc-sa/4.0/

BibTeX

@misc{cryptoeprint:2023/730,
      author = {Anubhab Baksi},
      title = {The Problem of Half Round Key XOR},
      howpublished = {Cryptology {ePrint} Archive, Paper 2023/730},
      year = {2023},
      url = {https://eprint.iacr.org/2023/730}
}