Session 8: Block Ciphers

Information and Communications Security

Volume 1334 of the series Lecture Notes in Computer Science pp 233-246


Related-key cryptanalysis of 3-WAY, Biham-DES,CAST, DES-X, NewDES, RC2, and TEA

  • John KelseyAffiliated withCounterpane Systems
  • , Bruce SchneierAffiliated withCounterpane Systems
  • , David WagnerAffiliated withU. C. Berkeley

* Final gross prices may vary according to local VAT.

Get Access


We present new related-key attacks on the block ciphers 3WAY, Biham-DES, CAST, DES-X, NewDES, RC2, and TEA. Differential related-key attacks allow both keys and plaintexts to be chosen with specific differences [KSW96]. Our attacks build on the original work, showing how to adapt the general attack to deal with the difficulties of the individual algorithms. We also give specific design principles to protect against these attacks.