Improved Cryptanalysis of the Block Cipher KASUMI - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2012

Improved Cryptanalysis of the Block Cipher KASUMI


KASUMI is a block cipher which consists of eight Feistel rounds with a 128-bit key. Proposed more than 10 years ago, the confidentiality and integrity of 3G mobile communications systems depend on the security of KASUMI. In the practically interesting single key setting, only up to 6 rounds have been attacked so far. In this paper we use some observations on the FL and FO functions. Combining these observations with a key schedule weakness, we select some special input and output values to refine the general 5-round impossible differentials and propose the first 7-round attack on KASUMI with time and data complexities similar to the previously best 6-round attacks. This leaves now only a single round of security margin. The new impossible differential attack on the last 7 rounds needs 2114.3 encryptions with 252.5 chosen plaintexts. For the attack on the first 7 rounds, the data complexity is 262 known plaintexts and the time complexity is 2115.8 encryptions.

Dates and versions

hal-00922230 , version 1 (25-12-2013)



Keting Jia, Leibo Li, Christian Rechberger, Jiazhe Chen, Xiaoyun Wang. Improved Cryptanalysis of the Block Cipher KASUMI. SAC 2012 - 19th International Conference Selected Areas in Cryptography, Aug 2012, Windsor, Canada. pp.222-233, ⟨10.1007/978-3-642-35999-6_15⟩. ⟨hal-00922230⟩
340 View
0 Download



Gmail Facebook X LinkedIn More