Presentation 1999/7/22
Strength of Round Function in RC6 against Higher Order Differential Attac
Hiroshi TANAKA, Hidema TANAKA, Toshinobu KANEKO,
PDF Download Page PDF download Page Link
Abstract(in Japanese) (See Japanese page)
Abstract(in English) RC6 proposed by Rivest et al, is a block cipher and one of the candidates of AES. User can choose word length w, number of rounds r and key length k, AES version has w=32[bit] and r=20. The designers have shown the security against Linear Attack and Differential Attack, but have not against Higher Order Differential Attack. We discuss the security of Round function from the view point of Higher Order Differential Attack. Since sub-keys are used with integer addition, there are some weak keys. The ratio of weak keys equals to the probability of successful attack. Considering the structure of Round function, integer operation and bit shift rotations, we searched effective differentials by computer simulations. As the results, we found 6 rounds Round function is attackable by 2nd order differential with about 0.2 % of successful attack, 4th order differential with about 0.2 % and 8th order differential with about 0.6 %.
Keyword(in Japanese) (See Japanese page)
Keyword(in English) Block Cipher / RC6 / Chosen Plain Text Attack / Hiwher Order Differential Attack / Weak key
Paper # ISEC99-23
Date of Issue

Conference Information
Committee ISEC
Conference Date 1999/7/22(1days)
Place (in Japanese) (See Japanese page)
Place (in English)
Topics (in Japanese) (See Japanese page)
Topics (in English)
Chair
Vice Chair
Secretary
Assistant

Paper Information
Registration To Information Security (ISEC)
Language JPN
Title (in Japanese) (See Japanese page)
Sub Title (in Japanese) (See Japanese page)
Title (in English) Strength of Round Function in RC6 against Higher Order Differential Attac
Sub Title (in English)
Keyword(1) Block Cipher
Keyword(2) RC6
Keyword(3) Chosen Plain Text Attack
Keyword(4) Hiwher Order Differential Attack
Keyword(5) Weak key
1st Author's Name Hiroshi TANAKA
1st Author's Affiliation Department of Electrical Engineering, Science University of TOKYO()
2nd Author's Name Hidema TANAKA
2nd Author's Affiliation Department of Electrical Engineering, Science University of TOKYO
3rd Author's Name Toshinobu KANEKO
3rd Author's Affiliation Department of Electrical Engineering, Science University of TOKYO
Date 1999/7/22
Paper # ISEC99-23
Volume (vol) vol.99
Number (no) 208
Page pp.pp.-
#Pages 8
Date of Issue