论文信息 - Improved Cryptanalysis of RC5

Improved Cryptanalysis of RC5

RC5 is a fast block cipher designed by Ron Rivest in 1994. Since then several attempts of cryptanalysis of this cipher were published. The best previously known attack requires 254 chosen plaintexts in order to derive the full set of 25 subkeys for the 12 round RC5 with 32 bit words. In this paper we show a drastic improvement of these results due to a novel partial differential approach. Our attack requires 244 chosen plaintexts. We show that the 64 bit word version of RC5 is also much weaker than it was expected.

Eyal Kushilevitz | Alex Biryukov | E. Kushilevitz | A. Biryukov

[1] Mitsuru Matsui,et al. Linear Cryptanalysis Method for DES Cipher , 1994, EUROCRYPT.

[2] Lars R. Knudsen,et al. Truncated and Higher Order Differentials , 1994, FSE.

[3] Ali Aydin Selçuk. New Results in Linear Cryptanalysis of RC5 , 1998, FSE.

[4] Burton S. Kaliski,et al. On Differential and Linear Crytoanalysis of the RC5 Encryption Algorithm , 1995, CRYPTO.

[5] Ronald L. Rivest,et al. The RC5 Encryption Algorithm , 1994, FSE.

[6] Xuejia Lai,et al. Markov Ciphers and Differential Cryptanalysis , 1991, EUROCRYPT.

[7] Eli Biham,et al. Differential Cryptanalysis of the Data Encryption Standard , 1993, Springer New York.

[8] Willi Meier,et al. Differential cryptanalysis of RC5 , 1997, Eur. Trans. Telecommun..