A Related-Key Attack on TREYFER

TREYFER is a lightweight cipher designed for resource constrained environments. In this paper, we present a related-key attack that directly recovers the secret key of TREYFER using about 211 chosen plaintext encryptions. Our attack is based on a set of deterministic algebraic relationships between TREYFER ciphertexts corresponding to related plaintexts encrypted under circularly byte shifted versions of the same key. The attack complexity is independent of the number of rounds of the cipher.