Paper 2026/1368 Original: eprint.iacr.org/2026/1368 ↗

SDDT: An Operation Skip Attack Framework for Bitslice Ciphers—Validated on PIPO

Dongwoo Kang
Hanbeom Shin
DongHyeon Kim
Seokhie Hong
HeeSeok Kim
Abstract

Bitslice implementations are widely adopted in lightweight cryptography (LWC) due to their efficiency and inherent resilience to side-channel attacks. However, this paper reveals that their decomposition of the S-box exposes critical vulnerabilities to the operation skip fault model. Unlike data corruption faults suffering from high-entropy diffusion, we identify that skipping bitwise operations induces strongly restricted differential patterns. To exploit this characteristic, we propose the Skip-induced Difference Distribution Table (SDDT), a framework mapping operation omissions to output differences. We validate this approach on the block cipher PIPO through practical experiments, successfully recovering the master key from deeper rounds with fewer faults than previously possible. Our findings underscore the fragility of bitslice designs against precise operation skip faults.

Metadata
Available format(s)
PDF
Category
Attacks and cryptanalysis
Publication info
Preprint.
History
2026-09-08: last updated
2026-07-03: published
Short URL
https://ia.cr/2026/1368
License
https://creativecommons.org/licenses/by-nc-sa/4.0/

BibTeX

@misc{cryptoeprint:2026/1368,
      author = {Dongwoo Kang and Hanbeom Shin and DongHyeon Kim and Seokhie Hong and HeeSeok Kim},
      title = {SDDT: An Operation Skip Attack Framework for Bitslice Ciphers—Validated on PIPO},
      howpublished = {Cryptology {ePrint} Archive, Paper 2026/1368},
      year = {2026},
      url = {https://eprint.iacr.org/2026/1368}
}
Note: In order to protect the privacy of readers, this archive does not use cookies or embedded third party content.