Automatic Search of Rectangle Attacks on Feistel Ciphers: Application to WARP - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Journal Articles IACR Transactions on Symmetric Cryptology Year : 2022

Automatic Search of Rectangle Attacks on Feistel Ciphers: Application to WARP

Abstract

In this paper we present a boomerang analysis of WARP, a recently proposed Generalized Feistel Network with extremely compact hardware implementations. We start by looking for boomerang characteristics that directly take into account the boomerang switch effects by showing how to adapt Delaune et al. automated tool to the case of Feistel ciphers, and discuss several improvements to keep the execution time reasonable. This technique returns a 23-round distinguisher of probability 2^{−124}, which becomes the best distinguisher presented on WARP so far. We then look for an attack by adding the key recovery phase to our model and we obtain a 26-round rectangle attack with time and data complexities of 2^{115.9} and 2^{120.6} respectively, again resulting in the best result presented so far. Incidentally, our analysis discloses how an attacker can take advantage of the position of the key addition (put after the S-box application to avoid complementation properties), which in our case offers an improvement of a factor of 2^{75} of the time complexity in comparison to a variant with the key addition positioned before. Note that our findings do not threaten the security of the cipher which iterates 41 rounds.
Fichier principal
Vignette du fichier
ToSC2022_2_05.pdf (1.11 Mo) Télécharger le fichier
Origin : Publisher files allowed on an open archive

Dates and versions

hal-03760280 , version 1 (14-11-2022)

Licence

Attribution - CC BY 4.0

Identifiers

Cite

Virginie Lallemand, Marine Minier, Loïc Rouquette. Automatic Search of Rectangle Attacks on Feistel Ciphers: Application to WARP. IACR Transactions on Symmetric Cryptology, 2022, 2022 (2), pp.113-140. ⟨10.46586/tosc.v2022.i2.113-140⟩. ⟨hal-03760280⟩
184 View
28 Download

Altmetric

Share

Gmail Facebook Twitter LinkedIn More