Memoryless Related-Key Boomerang Attack on 39-Round SHACAL-2
SHACAL-2 is a 64-round block cipher based on the compression function of the hash function standard SHA-256. It has a 256-bit block size and a variable length key of up to 512 bits. Up to now, all attacks on more than 37 rounds require at least 2235 bytes of memory. Obviously such attacks will never become of practical interest due to this high amount of space. In this paper we adopt the relate-key boomerang attack and present the first memoryless attack on 39-round SHACAL-2. Our attack only employs 28.5 bytes of memory and thus improves the data complexity of comparable attacks up to a factor of at least 2230, which is a substantial improvement. We do not need to store all the data which gives this low data complexity. The related-key boomerang attack presented in this paper can also be seen as a starting point for more advanced attacks on SHACAL-2. The main advantage of our new attack is that we can proceed the data sequentially instead of parallel as needed for other attacks, which reduces the memory requirements dramatically.
KeywordsSHACAL-2 block cipher differential cryptanalysis related-key boomerang attack memoryless attacks
Unable to display preview. Download preview PDF.
- 4.Handschuh, H., Naccache, D.: SHACAL: A Family of Block Ciphers. Submission to the NESSIE project (2002), http://www.cosic.esat.kuleuven.be/nessie/tweaks.html
- 8.Kim, J., Kim, G., Hong, S., Lee, S., Hong, D.: The Related-Key Rectangle Attack - Application to SHACAL-1. In: Wang, et al. (eds.) , pp. 123–136 (2004)Google Scholar
- 14.National Institute of Standards and Technology. FIPS 180-1: Secure Hash Standard (April 1995), http://csrc.nist.gov
- 15.National Institute of Standards and Technology. FIPS 180-2: Secure Hash Standard (August 2002), http://csrc.nist.gov
- 16.Shin, Y., Kim, J., Kim, G., Hong, S., Lee, S.: Differential-Linear Type Attacks on Reduced Rounds of SHACAL-2. In: Wang, et al. (eds.) , pp. 110–122 (2004)Google Scholar
- 19.Wang, H., Pieprzyk, J., Varadharajan, V. (eds.): ACISP 2004. LNCS, vol. 3108. Springer, Heidelberg (2004)Google Scholar