https://hal.inria.fr/hal-01649994Beierle, ChristofChristofBeierleHorst Görtz Institute for IT-security - Ruhr-Universität Bochum [Bochum]Canteaut, AnneAnneCanteautSECRET - Security, Cryptology and Transmissions - Inria de Paris - Inria - Institut National de Recherche en Informatique et en AutomatiqueLeander, GregorGregorLeanderHorst Görtz Institute for IT-security - Ruhr-Universität Bochum [Bochum]Rotella, YannYannRotellaSECRET - Security, Cryptology and Transmissions - Inria de Paris - Inria - Institut National de Recherche en Informatique et en AutomatiqueProving Resistance against Invariant Attacks: Properties of the Linear Layer HAL CCSD2017[INFO.INFO-CR] Computer Science [cs]/Cryptography and Security [cs.CR]Canteaut, Anne2017-11-28 10:27:492022-06-08 12:50:052017-11-28 15:00:04enConference papersapplication/pdf1Many lightweight block ciphers use a very simple key-schedule where the round-keys only differ by a round-constant. However, several of those schemes were recently broken using invariant attacks, i.e. invariant subspace attacks or nonlinear invariant attacks. This work analyzes the resistance of such ciphers against invariant attacks and reveals the precise mathematical properties that render those attacks applicable. As a first practical consequence, we prove that some ciphers including Prince, Skinny-64 and Mantis7 are not vulnerable to invariant attacks. Also, we show that the invariant factors of the linear layer have a major impact on these attacks. Most notably, if the number of invariant factors of the linear layer is small (e.g., if its minimal polynomial has a high degree), we can easily find round-constants which guarantee the resistance to all types of invariant attacks, independently of the choice of the Sbox-layer.