Linear cryptanalysis method for DES cipher. (English) Zbl 0951.94519

Matsui, Mitsuru

Helleseth, Tor (ed.), Advances in cryptology - EUROCRYPT ’93. Workshop on the theory and application of cryptographic techniques, Lofthus, Norway, May 23-27, 1993. Proceedings. Berlin: Springer. Lect. Notes Comput. Sci. 765, 386-397 (1994).

Summary: We introduce a new method for cryptanalysis of DES cipher, which is essentially a known-plaintext attack. As a result, it is possible to break 8-round DES cipher with \(2^{21}\) known-plaintexts and 16-round DES cipher with \(2^{47}\) known-plaintexts, respectively. Moreover, this method is applicable to an only-ciphertext attack in certain situations. For example, if plaintexts consist of natural English sentences represented by ASCII codes, 8-round DES cipher is breakable with \(2^{29}\) ciphertexts only.
For the entire collection see [Zbl 0847.00050].

MSC:

94A60

Cryptography