Chapter

Progress in Cryptology - INDOCRYPT 2004

Volume 3348 of the series Lecture Notes in Computer Science pp 191-205

Related-Key Attacks on DDP Based Ciphers: CIKS-128 and CIKS-128H

  • Youngdai KoAffiliated withInformation Security Team, LG CNS
  • , Changhoon LeeAffiliated withCenter for Information Security Technologies(CIST), Korea University
  • , Seokhie HongAffiliated withCenter for Information Security Technologies(CIST), Korea University
  • , Jaechul SungAffiliated withDepartment of Mathematics, University of Seoul
  • , Sangjin LeeAffiliated withCenter for Information Security Technologies(CIST), Korea University

* Final gross prices may vary according to local VAT.

Get Access

Abstract

CIKS-128 and CIKS-128H are 128-bit block ciphers with a 256-bit key sizes based on data-dependent operations, respectively. They are also fast hardware-oriented ciphers and improvements of block cipher CIKS-1 introduced in [14]. This paper presents related-key differential attacks on full-round CIKS-128 and CIKS-128H. In result, using full-round related-key differential characteristics with probability 2− − 36 and 2− − 35.4, these attacks can recover the partial subkey bits for CIKS-128 and CIKS-128H with about 240 plaintexts, respectively. These works suggests that the greatest possible care has to be taken when proposing improvements of the existing block ciphers.

Keywords

CIKS-128 CIKS-128H Block Cipher Related-Key Differential Attack Data-Dependent Operation