A detailed analysis of SAFER K

Journal of Cryptology

Volumn 13, Issue 4, 2000, Pages 417-436

  Knudsen, Lars R ^a  

^a UNIVERSITY OF BERGEN   (Norway)

Author keywords

Block cipher; Collisions; Cryptanalysis; SAFER; Truncated differentials

Indexed keywords

EID: 0005268717     PISSN: 09332790     EISSN: None     Source Type: Journal    
DOI: 10.1007/s001450010004     Document Type: Article

References (16)

1. E. Biham. New types of cryptanalytic attacks using related keys. Journal of Cryptology, 7(4):229-246, 1994.
2. E. Biham and A. Shamir. Differential Cryptanalysis of the Data Encryption Standard. Springer-Verlag, New York, 1993.
3. C. Harpes, G.G. Kramer, and J.L. Massey. A generalization of linear cryptanalysis and the applicability of Matsui's piling-up lemma. In L. Guillou and J.-J. Quisquater, editors, Advances in Cryptology EUROCRYPT '95, LNCS 921, pages 24-38. Springer-Verlag, Berlin, 1995.
4. Hoel, Port, and Stone. Introduction to Probability Theory. Houghton Mifflin, 1979.
5. ISO-10118. Information technology - security techniques - hash-functions, part 1: General and part 2: Hash-functions using an n-bit block cipher algorithm. ISO/IEC, 1994.
6. J. Kelsey, B. Schneier, and D. Wagner. Key-schedule cryptanalysis of IDEA, G-DES, COST, SAFER, and triple-DES. In Neal Koblitz, editor, Advances in Cryptology. CRYPTO '96, LNCS 1109, pages 237-251. Springer-Verlag, Berlin, 1996.
7. L.R. Knudsen. A key-schedule weakness in SAFER K-64. In Don Coppersmith, editor, Advances in Cryptology - CRYPTO '95, LNCS 963, pages 274-286. Springer-Verlag, Berlin, 1995.
8. L.R. Knudsen. Truncated and higher order differentials. In B. Preneel, editor, Fast Sofnvare Encryption - Second International Workshop, Leuven, LNCS 1008, pages 196-211. Springer-Verlag, Berlin, 1995.
9. L.R. Knudsen and T. Berson. Truncated differentials of SAFER. In D. Gollmann, editor, Fast Software Encryption, Third International Workshop, Cambridge, February 1996, LNCS 1039, pages 15-26. Springer-Verlag, Berlin, 1995.
10. X. Lai. Higher order derivatives and differential cryptanalysis. In R. Blahut, editor, Communication and Cryptography, Two Sides of One Tapestry. Kluwer Academic, Dordrecht, 1994. ISBN 0-7923-9469-0.
11. J.L. Massey. SAFER K-64: A byte-oriented block-ciphering algorithm. In R. Anderson, editor, Fast Software Encryption - Proc. Cambridge Security Workshop, Cambridge, LNCS 809, pages 1-17. SpringerVerlag, Berlin, 1994.
12. J.L. Massey. SAFER K-64: One year later. In B. Preneel, editor. Fast Sofnvare Encryption - Second International Workshop, Leuven, LNCS 1008, pages 212-241. Springer-Verlag, Berlin, 1995.
13. J.L. Massey. Strengthened key schedule for the cipher SAFER. Posted on USENET newsgroup sci.crypt, September 9,1995.
14. S. Murphy. An analysis of SAFER. Private communication, 1994.
15. B. Preneel. Hash functions based on block ciphers: a synthetic approach. In D.R. Stinson, editor, Advances in Cryptology - CRYPTO '93, LNCS 773, pages 368-378. Springer-Verlag, Berlin, 1993.
16. S. Vaudenay. On the need for multipermutations: cryptanalysis of MD4 and SAFER. In B. Preneel, editor, Fast Sofnvare Encryption - Second International Workshop, Leuven, LNCS 1008, pages 286-297. Springer-Verlag, Berlin, 1995.