Search Algorithm of Precise Integral Distinguisher of Byte-Based Block Cipher

  • Haruhisa Kosuge
  • Keisuke Iwai
  • Hidema Tanaka
  • Takakazu Kurokawa
Conference paper
Part of the Lecture Notes in Computer Science book series (LNCS, volume 9478)


Integral distinguisher is the main factor of integral attack. Conventionally, first order integral distinguisher is obtained and higher order integral distinguisher is derived from extension of first order (conventional algorithm). The algorithm was applied to many byte-based block ciphers, and such application was thought to be established. Even in such application, however, we find that the conventional algorithm is imprecise. We discovered integral distinguisher of byte-based block ciphers, TWINE and LBlock, which are different from results of the conventional evaluation. As a substitute for the imprecise algorithm, we propose a new algorithm to search higher order integral distinguisher. The point of the proposal algorithm is exploitation of bijective and injective components of cipher functions. We focus on injective components for the first time, in addition to bijective components which are already exploited. We demonstrate the proposal algorithm by TWINE and LBlock. As a result, we confirm the result of the proposal algorithm is consistent with our result which was conjectured from computer experiment. Obtaining more precise integral distinguisher allows designers to select stronger cipher structures and key schedules, and the proposal algorithm contributes to it.


Chosen plaintext attack Light-weight block cipher Integral attack Saturation attack 


  1. 1.
    Daemen, J., Knudsen, L.R., Rijmen, V.: The block cipher SQUARE. In: Biham, E. (ed.) FSE 1997. LNCS, vol. 1267, pp. 149–165. Springer, Heidelberg (1997). CrossRefGoogle Scholar
  2. 2.
    Ferguson, N., Kelsey, J., Lucks, S., Schneier, B., Stay, M., Wagner, D., Whiting, D.: Improved cryptanalysis of Rijndael. In: Schneier, B. (ed.) FSE 2000. LNCS, vol. 1978, pp. 213–230. Springer, Heidelberg (2001). CrossRefGoogle Scholar
  3. 3.
    Knudsen, L., Wagner, D.: Integral cryptanalysis. In: Daemen, J., Rijmen, V. (eds.) FSE 2002. LNCS, vol. 2365, pp. 112–127. Springer, Heidelberg (2002). CrossRefGoogle Scholar
  4. 4.
    Kosuge, H., Tanaka, H., Iwai, K., Kurokawa, T.: Computational security evaluation of light-weight block cipher against integral attack by gpgpu. In: The 2nd IEEE International Conference on Cyber Security and Cloud ComputingGoogle Scholar
  5. 5.
    Sasaki, Y., Wang, L.: Comprehensive study of integral analysis on 22-round LBlock. In: Kwon, T., Lee, M.-K., Kwon, D. (eds.) ICISC 2012. LNCS, vol. 7839, pp. 156–169. Springer, Heidelberg (2013). CrossRefGoogle Scholar
  6. 6.
    Sony Corporation: The 128-bit blockcipher CLEFIA security and performance evaluations revision 1.0 (2007).
  7. 7.
    Suzaki, T., Minematsu, K., Morioka, S., Kobayashi, E.: TWINE: a lightweight block cipher for multiple platforms. In: Knudsen, L.R., Wu, H. (eds.) SAC 2012. LNCS, vol. 7707, pp. 339–354. Springer, Heidelberg (2013). CrossRefGoogle Scholar
  8. 8.
    Wu, W., Zhang, L.: LBlock: a lightweight block cipher. In: Lopez, J., Tsudik, G. (eds.) ACNS 2011. LNCS, vol. 6715, pp. 327–344. Springer, Heidelberg (2011). CrossRefGoogle Scholar
  9. 9.
    Zhang, W., Su, B., Wu, W., Feng, D., Wu, C.: Extending higher-order integral: an efficient unified algorithm of constructing integral distinguishers for block ciphers. In: Bao, F., Samarati, P., Zhou, J. (eds.) ACNS 2012. LNCS, vol. 7341, pp. 117–134. Springer, Heidelberg (2012). CrossRefGoogle Scholar

Copyright information

© Springer International Publishing Switzerland 2015

Authors and Affiliations

  • Haruhisa Kosuge
    • 1
  • Keisuke Iwai
    • 1
  • Hidema Tanaka
    • 1
  • Takakazu Kurokawa
    • 1
  1. 1.National Defence Academy of JapanYokosukaJapan

Personalised recommendations