Cryptanalysis of mCrypton‐64

Abstract

SUMMARYIn recent years, because of the security requirements of resource-constrained devices, design and analysis of lightweight block ciphers has received more attention. mCrypton is a lightweight block cipher that has been specifically designed for using in resource-constrained devices, such as low-cost radio-frequency identification tags and sensors. In this paper, we consider cryptanalysis of full-round mCrypton-64 using a new extension of biclique attack called non-isomorphic biclique cryptanalysis. As it is known, effectiveness of the biclique attack is highly dependent to the weakness of key schedule, and it does not seem to be appropriate for block ciphers with strong key scheduling. The non-isomorphic biclique attack, using an asymmetric key partitioning technique, provides more degrees of freedom to the attacker and makes it possible to use the diffusion layer properties of a block cipher for constructing longer bicliques. Results show that the attack on full-round mCrypton requires 2 33.9 chosen plaintexts and a time complexity of 2 62.67encryptions. The computational complexity reduces to 2 62.3 , 2 61.4 , and 2 59.75 encryptions for 10, 8, and 6 rounds of mCrypton-64, respectively. We also have a discussion on the general form of the computational complexity for non-isomorphic biclique cryptanalysis.

Biclique cryptanalysis of MIBS‐80 and PRESENT‐80 block ciphers

“…The recomputations that are needed to filter out wrong keys can be decreased by using the early abort technique [7,17,18]. In this technique, we fist recompute those parts of cipher that are needed to obtain only a part of matching variable.…”

“…After that, many studies have been performed on security of different lightweight ciphers against biclique attack [5], [6], [7], and [8].…”