Portal de Periódicos da CAPES

Cryptanalysis of LOKI 91

1993; Springer Science+Business Media; Linguagem: Inglês

10.1007/3-540-57220-1_62

1611-3349

Lars R. Knudsen,

Coding theory and cryptography

In this paper we examine the redesign of LOKI, LOKI 91 proposed in [5]. First it is shown that there is no characteristic with a probability high enough to do a successful differential attack on LOKI 91. Secondly we show that the size of the image of the F-function in LOKI 91 is 8/13×232. Finally we introduce a chosen plaintext attack that reduces an exhaustive key search on LOKI 91 by almost a factor 4 using 233+2 chosen plaintexts.