Geodesic
Differential cryptanalysis of the MARS block cipher
Prikladnaâ diskretnaâ matematika, no. 4 (2009), pp. 56-63.

Voir la notice de l'article provenant de la source Math-Net.Ru

In this work we present a differential attack on MARS which breaks 8 core and 8 mixing rounds with pre- and post-whitening. This attack is based on a new 8-core round differential characteristic with probability $2^{-98}$ and allows to recover more subkeys bits than previously published attacks (752 instead of 682) faster than exhaustive key search. The success probability of the attack is more than 0{,}99. The attack requires $2^{105}$ chosen plaintexts, $2^{109}$ bytes of memory and $2^{231}$ encryptions.
Keywords: block cipher, differential attack, Advanced Encryption Standard
Mots-clés : MARS. 
@article{PDM_2009_4_a4,
     author = {A. I. Pestunov},
     title = {Differential cryptanalysis of the {MARS} block cipher},
     journal = {Prikladna\^a diskretna\^a matematika},
     pages = {56--63},
     publisher = {mathdoc},
     number = {4},
     year = {2009},
     language = {ru},
     url = {http://geodesic.mathdoc.fr/item/PDM_2009_4_a4/}
}
TY  - JOUR
AU  - A. I. Pestunov
TI  - Differential cryptanalysis of the MARS block cipher
JO  - Prikladnaâ diskretnaâ matematika
PY  - 2009
SP  - 56
EP  - 63
IS  - 4
PB  - mathdoc
UR  - http://geodesic.mathdoc.fr/item/PDM_2009_4_a4/
LA  - ru
ID  - PDM_2009_4_a4
ER  - 
%0 Journal Article
%A A. I. Pestunov
%T Differential cryptanalysis of the MARS block cipher
%J Prikladnaâ diskretnaâ matematika
%D 2009
%P 56-63
%N 4
%I mathdoc
%U http://geodesic.mathdoc.fr/item/PDM_2009_4_a4/
%G ru
%F PDM_2009_4_a4
A. I. Pestunov. Differential cryptanalysis of the MARS block cipher. Prikladnaâ diskretnaâ matematika, no. 4 (2009), pp. 56-63. http://geodesic.mathdoc.fr/item/PDM_2009_4_a4/

[1] Advanced Encryption Standard (AES) project 1997–2000, http://csrc.nist.gov/encryption/aes

[2] New European Schemes for Signatures, Integrity, and Encryption Deliverables of the NESSIE project 2003, http://www.cosic.esat.kuleuven.be/nessie

[3] CRYPTREC project 2000–2002, \href{http://www.cryptrec.go.jp/english/} \allowbreak{http://www.cryptrec.go.jp/english/}

[4] Schneier B., “A self-study course in block-cipher cryptanalysis”, Cryptologia, 24:1 (2000), 18–34 | DOI

[5] Burwick C. et al., MARS – a candidate cipher for AES, AES submission , 1999 http://www.research.ibm.com/security/mars.pdf

[6] Kelsey J., Schneier B., “MARS attacks! Preliminary cryptanalysis of reduced-round MARS variants”, Proc. of the Third AES Candidate Conf., 2000; http://www.schneier.com/paper-mars-attacks.pdf

[7] Kelsey J., Kohno T., Schneier B., “Amplified boomerang attacks againts reduced-round MARS and Serpent”, LNCS, 1978, 2001, 75–93 | Zbl

[8] Biham E., Shamir A., “Differential cryptanalysis of DES-like cryptosystems”, J. Cryptol., 4 (1991), 3–72 | DOI | MR | Zbl

[9] Knudsen L., “Truncated and higher order differentials”, LNCS, 1008, 1995, 196–211 | Zbl

[10] Biryukov A., Kushilevitz E., “Improved cryptanalysis of RC5”, LNCS, 1403, 1998, 85–99 | Zbl

[11] Biryukov A., “The boomerang attack on 5 and 6-Round reduced AES”, LNCS, 3373, 2005, 11–15 | Zbl

[12] Borovkov A. A., Teoriya veroyatnostei, Nauka, M., 1976, 352 pp. | MR | Zbl