Related-Key Differential Attacks on Cobra-S128, Cobra-F64a, and Cobra-F64b
- Cite this paper as:
- Lee C., Kim J., Hong S., Sung J., Lee S. (2005) Related-Key Differential Attacks on Cobra-S128, Cobra-F64a, and Cobra-F64b. In: Dawson E., Vaudenay S. (eds) Progress in Cryptology – Mycrypt 2005. Mycrypt 2005. Lecture Notes in Computer Science, vol 3715. Springer, Berlin, Heidelberg
Data-dependent permutations (DDPs) which are very suitable for cheap hardware implementations have been introduced as a cryptographic primitive. Cobra-S128 and Cobra-F64 (which is a generic name for Cobra-F64a and Cobra-F64b) are 128-bit and 64-bit iterated block ciphers with a 128-bit key size based on such DDPs, respectively. Unlike the predecessor DDP-based ciphers [16,5], Cobra-S128 is a software-oriented cipher and Cobra-F64 is a firmware-suitable cipher. In this paper, we derive several structural properties of Cobra-S128 and Cobra-F64 and then use them to devise key recovery attacks on Cobra-S128 and Cobra-F64. These works are the first known attacks on Cobra-S128 and Cobra-F64.
KeywordsCobra-S128 Cobra-F64 Block Cipher Related-Key Attack Data-Dependent Permutation
Unable to display preview. Download preview PDF.