Impossible Boomerang Attack for Block Cipher Structures TeX Export

@misc{citeulike:6053379, abstract = {Impossible boomerang attack \cite{lu} (IBA) is a new variant of differential cryptanalysis against block ciphers. Evident from its name, it combines the ideas of both impossible differential cryptanalysis and boomerang attack. Though such an attack might not be the best attack available, its complexity is still less than that of the exhaustive search. In impossible boomerang attack, impossible boomerang distinguishers are used to retrieve some of the subkeys. Thus the security of a block cipher against IBA can be evaluated by impossible boomerang distinguishers. In this paper, we study the impossible boomerang distinguishers for block cipher structures whose round functions are bijective. Inspired by the \$\mathcal{U}\$-method in \cite{kim}, we provide an algorithm to compute the maximum length of impossible boomerang distinguishers for general block cipher structures, and apply the algorithm to known block cipher structures such as Nyberg's generalized Feistel network, a generalized CAST256-like structure, a generalized MARS-like structure, a generalized RC6-like structure, etc.}, author = {Choy, Jiali and Yap, Huihui}, citeulike-article-id = {6053379}, citeulike-linkout-0 = {http://eprint.iacr.org/2009/489}, day = {5}, howpublished = {Cryptology ePrint Archive, Report 2009/489}, keywords = {boomerang, differential}, month = {Oct}, posted-at = {2009-11-01 11:33:39}, priority = {2}, title = {Impossible Boomerang Attack for Block Cipher Structures}, url = {http://eprint.iacr.org/2009/489}, year = {2009} }

TY - ELEC ID - citeulike:6053379 L3 - citeulike-article-id:6053379 N2 - Impossible boomerang attack \cite{lu} (IBA) is a new variant of differential cryptanalysis against block ciphers. Evident from its name, it combines the ideas of both impossible differential cryptanalysis and boomerang attack. Though such an attack might not be the best attack available, its complexity is still less than that of the exhaustive search. In impossible boomerang attack, impossible boomerang distinguishers are used to retrieve some of the subkeys. Thus the security of a block cipher against IBA can be evaluated by impossible boomerang distinguishers. In this paper, we study the impossible boomerang distinguishers for block cipher structures whose round functions are bijective. Inspired by the $\mathcal{U}$-method in \cite{kim}, we provide an algorithm to compute the maximum length of impossible boomerang distinguishers for general block cipher structures, and apply the algorithm to known block cipher structures such as Nyberg's generalized Feistel network, a generalized CAST256-like structure, a generalized MARS-like structure, a generalized RC6-like structure, etc. TI - Impossible Boomerang Attack for Block Cipher Structures KW - boomerang KW - differential AU - Choy, Jiali AU - Yap, Huihui PY - 2009/Oct/05/ UR - http://eprint.iacr.org/2009/489 ER -