Cryptanalysis of Akelarre


Published: Apr 04, 2000 Updated: Apr 04, 2000 Section: Network Security Library :: Cryptography Author: Company: Counterpane Internet Security, Inc. Printable Version Adjust font size: Rating: 3.8/5 - 5 Votes 1 2 3 4 5

We show two practical attacks against the Akelarre block cipher. The best attack retrieves the 128-bit key using fewer than 100 chosen plaintexts and 242 off-line trial encryptions. Our attacks use a weakness in the round function that preserves the parity of the input, a set of 1-round differential characteristics with probability 1, and the lack of avalanche and one-way properties in the key schedule. We suggest some ways of fixing these immediate weaknesses, but conclude that the algorithm should be abandoned in favor of better-studied alternatives.

Click Here to download this article