Summary

The 2018 International Symposium on Information Theory and Its Applications (ISITA2018)

2018

Session Number:Tu-PM-2-2

Session:

Number:Tu-PM-2-2.1

Integral Cryptanalysis of Reduced-round KASUMI

Nobuyuki SUGIO,  Yasutaka IGARASHI,  Toshinobu KANEKO,  

pp.447-451

Publication Date:2018/10/18

Online ISSN:2188-5079

DOI:10.34385/proc.55.Tu-PM-2-2.1

PDF download

PayPerView

Summary:
Integral cryptanalysis, which was introduced by Knudsen and Wagner, is one of the most powerful attacks on symmetric key ciphers. Attackers preliminarily search integral characteristics of a target cipher for the key-recovery attack. Todo proposed a novel technique named the division property to find them efficiently. In this paper, we apply this technique to the symmetric key block cipher KASUMI which was developed by modifying MISTY1. It has been used worldwide in the 3rd generation mobile communication networks. As a result, we found new 4.5-round characteristics of KASUMI for the first time. We show that 7-round KASUMI is attackable with 2^63 data complexity and 2^63.3 encryptions under the weak key conditions.