Related-Key Differential Attacks on Cobra-S128, Cobra-F64a, and Cobra-F64b

  • Changhoon Lee
  • Jongsung Kim
  • Seokhie Hong
  • Jaechul Sung
  • Sangjin Lee
Conference paper

DOI: 10.1007/11554868_18

Part of the Lecture Notes in Computer Science book series (LNCS, volume 3715)
Cite this paper as:
Lee C., Kim J., Hong S., Sung J., Lee S. (2005) Related-Key Differential Attacks on Cobra-S128, Cobra-F64a, and Cobra-F64b. In: Dawson E., Vaudenay S. (eds) Progress in Cryptology – Mycrypt 2005. Mycrypt 2005. Lecture Notes in Computer Science, vol 3715. Springer, Berlin, Heidelberg

Abstract

Data-dependent permutations (DDPs) which are very suitable for cheap hardware implementations have been introduced as a cryptographic primitive. Cobra-S128 and Cobra-F64 (which is a generic name for Cobra-F64a and Cobra-F64b) are 128-bit and 64-bit iterated block ciphers with a 128-bit key size based on such DDPs, respectively. Unlike the predecessor DDP-based ciphers [16,5], Cobra-S128 is a software-oriented cipher and Cobra-F64 is a firmware-suitable cipher. In this paper, we derive several structural properties of Cobra-S128 and Cobra-F64 and then use them to devise key recovery attacks on Cobra-S128 and Cobra-F64. These works are the first known attacks on Cobra-S128 and Cobra-F64.

Keywords

Cobra-S128 Cobra-F64 Block Cipher Related-Key Attack Data-Dependent Permutation 

Preview

Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

Copyright information

© Springer-Verlag Berlin Heidelberg 2005

Authors and Affiliations

  • Changhoon Lee
    • 1
  • Jongsung Kim
    • 2
  • Seokhie Hong
    • 1
  • Jaechul Sung
    • 3
  • Sangjin Lee
    • 1
  1. 1.Center for Information Security Technologies(CIST)Korea UniversitySeoulKorea
  2. 2.Katholieke Universiteit Leuven, ESAT/SCD-COSICBelgium
  3. 3.Department of MathematicsUniversity of SeoulSeoulKorea

Personalised recommendations