Truncated differential cryptanalysis

From Wikipedia, the free encyclopedia

In cryptography, truncated differential cryptanalysis is a generalization of differential cryptanalysis, an attack against block ciphers. Lars Knudsen developed the technique in 1994. Whereas ordinary differential cryptanalysis analyzes the full difference between two texts, the truncated variant considers differences that are only partially determined. It has been applied to SAFER, IDEA, Skipjack, E2, Twofish, Camellia, CRYPTON, and even the stream cipher Salsa20.

[edit] References

• Lars Knudsen (1994). "Truncated and Higher Order Differentials" (PDF/PostScript). 2nd International Workshop on Fast Software Encryption (FSE 1994): 196-211, Leuven: Springer-Verlag. Retrieved on 2007-02-14. 
• Lars Knudsen, Thomas Berson (1996). "Truncated Differentials of SAFER" (PDF/PostScript). 3rd International Workshop on Fast Software Encryption (FSE 1996): 15-26, Cambridge: Springer-Verlag. Retrieved on 2007-02-27. 
• Johan Borst, Lars R. Knudsen, Vincent Rijmen (1997-05). "Two Attacks on Reduced IDEA" (gzipped PostScript). Advances in Cryptology - EUROCRYPT '97: 1-13, Konstanz: Springer-Verlag. Retrieved on 2007-03-08. 
• Lars Knudsen, M.J.B. Robshaw, David Wagner (1999). "Truncated Differentials and Skipjack" (PostScript). Advances in Cryptology - CRYPTO '99: 165-180, Santa Barbara, California: Springer-Verlag. Retrieved on 2007-02-27. 
• M. Matsui, T. Tokita (1999). "Cryptanalysis of a Reduced Version of the Block Cipher E2" (PDF). 6th International Workshop on Fast Software Encryption (FSE 1999): 71-80, Rome: Springer-Verlag. Retrieved on 2007-02-27. 
• Shiho Moriai, Yiqun Lisa Yin (2000). "Cryptanalysis of Twofish (II)" (PDF). Retrieved on 2007-02-27.
• Paul Crowley (2006). Truncated differential cryptanalysis of five rounds of Salsa20. Retrieved on 2007-02-27.