On Boomerang Attacks on Quadratic Feistel Ciphers - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Article Dans Une Revue IACR Transactions on Symmetric Cryptology Année : 2023

On Boomerang Attacks on Quadratic Feistel Ciphers

Résumé

The recent introduction of the Boomerang Connectivity Table (BCT) at Eurocrypt 2018 revived interest in boomerang cryptanalysis and in the need to correctly build boomerang distinguishers. Several important advances have been made on this matter, with in particular the study of the extension of the BCT theory to multiple rounds and to different types of ciphers. In this paper, we pursue these investigations by studying the specific case of quadratic Feistel ciphers, motivated by the need to look at two particularly lightweight ciphers, KATAN and Simon. Our analysis shows that their light round function leads to an extreme case, as a one-round boomerang can only have a probability of 0 or 1. We identify six papers presenting boomerang analyses of KATAN or Simon and all use the naive approach to compute the distinguisher’s probability. We are able to prove that several results are theoretically incorrect and we run experiments to check the probability of the others. Many do not have the claimed probability: it fails distinguishing in some cases, but we also identify instances where the experimental probability turns out to be better than the claimed one. To address this shortfall, we propose an SMT model taking into account the boomerang constraints. We present several experimentally-verified related-key distinguishers obtained with our new technique: on KATAN32 a 151-round boomerang and on Simon-32/64 a 17-round boomerang, a 19-round rotational-xor boomerang and a 15-round rotational-xor-differential boomerang. Furthermore, we extend our 19-round distinguisher into a 25-round rotational-xor rectangle attack on Simon-32/64. To the best of our knowledge this attack reaches one more round than previously published results.
Fichier principal
Vignette du fichier
ToSC2023_3_04.pdf (1.1 Mo) Télécharger le fichier
Origine : Fichiers éditeurs autorisés sur une archive ouverte

Dates et versions

hal-04214762 , version 1 (22-09-2023)

Licence

Paternité

Identifiants

Citer

Xavier Bonnetain, Virginie Lallemand. On Boomerang Attacks on Quadratic Feistel Ciphers: New results on KATAN and Simon. IACR Transactions on Symmetric Cryptology, 2023, 2023 (3), pp.101-145. ⟨10.46586/tosc.v2023.i3.101-145⟩. ⟨hal-04214762⟩
48 Consultations
46 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More