Paper 2024/151 Original: eprint.iacr.org/2024/151 ↗

Improving Linear Key Recovery Attacks using Walsh Spectrum Puncturing

Antonio Flórez-Gutiérrez
Yosuke Todo
Abstract

In some linear key recovery attacks, the function which determines the value of the linear approximation from the plaintext, ciphertext and key is replaced by a similar map in order to improve the time or memory complexity at the cost of a data complexity increase. We propose a general framework for key recovery map substitution, and introduce Walsh spectrum puncturing, which consists of removing carefully-chosen coefficients from the Walsh spectrum of this map. The capabilities of this technique are illustrated by describing improved attacks on reduced-round Serpent (including the first 12-round attack on the 192-bit key variant), GIFT-128 and NOEKEON, as well as the full DES.

Metadata
Available format(s)
PDF
Category
Secret-key cryptography
Publication info
Preprint.
History
2024-02-02: last updated
2024-02-02: published
Short URL
https://ia.cr/2024/151
License
https://creativecommons.org/licenses/by/4.0/

BibTeX

@misc{cryptoeprint:2024/151,
      author = {Antonio Flórez-Gutiérrez and Yosuke Todo},
      title = {Improving Linear Key Recovery Attacks using Walsh Spectrum Puncturing},
      howpublished = {Cryptology {ePrint} Archive, Paper 2024/151},
      year = {2024},
      url = {https://eprint.iacr.org/2024/151}
}
Note: In order to protect the privacy of readers, this archive does not use cookies or embedded third party content.