Journal of University of Chinese Academy of Sciences >
On E2 and Camellia Block Cipher
Received date: 2001-04-29
Online published: 2001-03-10
E2 and Camellia were developed by NTT in recent two years,which reflect the design level of block cipher in Japan.We discuss their speciality and design skill.Firstly,we point out the property of FL and FL -1 which could be used to attack Camellia by meet-in-middle.Next we analyze the variant of Camellia-Camellia *,and the result show that truncated differential cryptanalysis threaten the security of the 10-round Camellia *.Therefore it is important using different S-boxes in Camellia.Finally we analyze the variant of E2-E2 *,and the result show that truncated differential cryptanalysis threaten the security of the 12-round E2 *.So the construction of P is important in the design of block cipher.
Key words： differential truncated; differential cryptanalysis; block cipher
Wu Wenling . On E2 and Camellia Block Cipher[J]. Journal of University of Chinese Academy of Sciences, 2001 , 18(2) : 181 -185 . DOI: 10.7523/j.issn.2095-6134.2001.2.017
1 N T T-Nippon T elegraph and Telephone Corporation :E2 :Ef ficient Encryption A lgorit hm.htt p :// info.isl.ntt.co.jp/ e2
2 K aoki, T Ichikaw a, M K anda, M M at sui, S M oriai, J Nakajima, T Tokita.Specif icat ion of Camellia-a 128-bit Block Ci pher.SAC′2000, Sev-enth Annual Workshop on Select ed A reas in C rypt ography, 2000.14 ～ 15
3 M K anda.Pract ical Secu rit y Evaluat ion A gainst Di ff erent ial and Linear A t tacks for Feist el Ciphers w it h S PN Round Function.SA C′2000.Seventh A nnual W orkshop on S elected Areas in Cryptography, 2000.14 ～ 15
4 M M atsui, T Tokit a.Cryptanalysi s of a Reduced Version of the Block Cipher E2.Fast S of tw are Encryption-6 thInt ernat ional Workshop, FSE′99, Lectu re N otes in Computer Sci ence 1636, 1999.71 ～ 80
5 S M oriai, M S ugi ta, K A oki, M K anda.S ecurity of E2 A gainst T runcated Dif ferential Cryptanalysi s.Select ed Areas in Crypt ography, 6 thAn-nual Internati onal Workshop, SA C′99, Lect ure N otes in Comput er S cience 1758, 2000.106 ～ 117
6 L R K nudsen.Truncat ed and Higher O rder Dif ferentials.Fast Sof tw are Encrypti on-Second International Workshop, Lect ure N ot es in Com-puter Science 1008, 1995.196 ～ 211
/
| 〈 |
|
〉 |