Truncated Boomerang Attacks and Application to AES-Based Ciphers - Inria - Institut national de recherche en sciences et technologies du numérique
Conference Papers Year : 2023

Truncated Boomerang Attacks and Application to AES-Based Ciphers

Abstract

The boomerang attack is a cryptanalysis technique that combines two short differentials instead of using a single long differential. It has been applied to many primitives, and results in the best known attacks against several AES-based ciphers (Kiasu-BC, Deoxys-BC). In this paper, we introduce a general framework for boomerang attacks with truncated differentials. We show that the use of truncated differentials provides a significant improvement over the best boomerang attacks in the literature. In particular, we take into account structures on the plaintext and ciphertext sides, and include an analysis of the key recovery step. On 6-round AES, we obtain a competitive structural distinguisher with complexity 2 87 and a key recovery attack with complexity 2 61. The truncated boomerang attack is particularly effective against tweakable AES variants. We apply it to 8-round Kiasu-BC, resulting in the best known attack with complexity 2 83 (rather than 2 103). We also show an interesting use of the 6-round distinguisher on the full TNT-AES, a tweakable block-cipher using 6-round AES as a building block. Finally, we apply this framework to Deoxys-BC, using a MILP model to find optimal trails automatically. We obtain the best attacks against round-reduced versions of all variants of Deoxys-BC.
Fichier principal
Vignette du fichier
2022-701.pdf (1.05 Mo) Télécharger le fichier
Origin Files produced by the author(s)

Dates and versions

hal-04277583 , version 1 (09-11-2023)

Identifiers

Cite

Augustin Bariant, Gaëtan Leurent. Truncated Boomerang Attacks and Application to AES-Based Ciphers. EUROCRYPT 2023 - 42nd Annual International Conference on the Theory and Applications of Cryptographic Technique, Apr 2023, Lyon, France. pp.3-35, ⟨10.1007/978-3-031-30634-1_1⟩. ⟨hal-04277583⟩

Collections

INRIA INRIA2 ANR
44 View
59 Download

Altmetric

Share

More