KLEIN is a family of lightweight block ciphers which proposed at RFIDSec 2011 by Gong et. al. It has a 64-bit state and 64,80 or 96-bit key size which introduce its version. It uses 16 same 4-bitS-boxes combined with two AES's MixColumn transformations for eachround. This approach allows compact implementations of KLEIN in bothlow-end software and hardware. Such an innovative combination attractsthe attention of cryptanalysts, and several security analyses have beenpublished. The most successful one was represented in FSE 2014 whichwas a truncated differential attack. They could attack up to 12, 13 and14 rounds out of total number of 12, 16 and 20 rounds for KLEIN-64,-80 and -96, respectively. In this paper, by finding two new truncateddifferential paths with better probabilities and a slight changing in keyrecovery method we present two truncated differential attacks on KLEIN,which recover the full secret key with better time and data complexitiesfor the previously analyzed number of rounds. Also by using these truncated dierential paths we are able to attack up to 14 and 15 roundsfor KLEIN-80 and -96, respectively, which are the highest rounds everanalyzed.
@article{444,
title = {An improved truncated differential cryptanalysis of KLEIN},
journal = {Tatra Mountains Mathematical Publications},
volume = {65},
year = {2016},
doi = {10.2478/tatra.v67i0.444},
language = {EN},
url = {http://dml.mathdoc.fr/item/444}
}
Rasoolzadeh, Shahram; Ahmadian, Zahra; Salmasizadeh, Mahmoud; Aref, Mohammad Reza. An improved truncated differential cryptanalysis of KLEIN. Tatra Mountains Mathematical Publications, Tome 65 (2016) . doi : 10.2478/tatra.v67i0.444. http://gdmltest.u-ga.fr/item/444/