[Resource Topic] 2022/1398: MILP-aided Cryptanalysis of the FUTURE Block Cipher

Welcome to the resource topic for 2022/1398

MILP-aided Cryptanalysis of the FUTURE Block Cipher

Authors: Murat Burhan İlter, Ali Aydin Selcuk


FUTURE is a recently proposed, lightweight block cipher. It has an AES-like, SP-based, 10-round encryption function, where, unlike most other lightweight constructions, the diffusion layer is based on an MDS matrix. Despite its relative complexity, it has a remarkable hardware performance due to careful design decisions.

In this paper, we conducted a MILP-based analysis of the cipher, where we incorporated exact probabilities rather than just the number of active S-boxes into the model. Through the MILP analysis, we were able to find differential and linear distinguishers for up to 5 rounds of FUTURE, extending the known distinguishers of the cipher by one round.

ePrint: https://eprint.iacr.org/2022/1398

See all topics related to this paper.

Feel free to post resources that are related to this paper below.

Example resources include: implementations, explanation materials, talks, slides, links to previous discussions on other websites.

For more information, see the rules for Resource Topics .