Data-dependent permutations (DDPs) which are very suitable for cheap hardware implementations have been introduced as a cryptographic primitive. Cobra-S128 and Cobra-F64 (which is a generic name for Cobra-F64a and Cobra-F64b) are 128-bit and 64-bit iterated block ciphers with a 128-bit key size based on such DDPs, respectively. Unlike the predecessor DDP-based ciphers [16,5], Cobra-8128 is a software-oriented cipher and Cobra-F64 is a firmware-suitable cipher. In this paper, we derive several structural properties of Cobra-8128 and Cobra-F64 and then use them to devise key recovery attacks on Cobra-8128 and Cobra-F64. These works are the first known attacks on Cobra-8128 and Cobra-F64. © Springer-Verlag Berlin Heidelberg 2005.
CITATION STYLE
Lee, C., Kim, J., Hong, S., Sung, J., & Lee, S. (2005). Related-key differential attacks on Cobra-S128, Cobra-F64a, and Cobra-F64b. In Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics) (Vol. 3715 LNCS, pp. 244–262). Springer Verlag. https://doi.org/10.1007/11554868_18
Mendeley helps you to discover research relevant for your work.