Cryptanalysis of Rijmen-Preneel trapdoor ciphers

Abstract

Rijmen and Preneel recently proposed for the first time a family of trapdoorblock ciphers [8]. In this family of ciphers, a trapdooris hidden in S-boxes and is claimed to be undetectable in [8] for properlychosen parameters. Given the trapdoor,the secret key (used for encryption and decryption) can be recovered easily by applying Matsui's linear cryptanalysis [6].In this paper, we break this family of trapdoor block ciphers by developing an attack on the S-boxes. We show how to find the trapdoor in the S-boxes and demonstrate that it is impossible to adjust the parameters of the S-boxes such that detecting the trapdoor is difficult meanwhile finding the secret key by trapdoor information is easy.