[Resource Topic] 2024/1804: Quantum Chosen-Cipher Attack on Camellia

Welcome to the resource topic for 2024/1804

Title:
Quantum Chosen-Cipher Attack on Camellia

Authors: Yanjun Li, Qi Wang, DingYun Huang, Jian Liu, Huiqin Xie

Abstract:

The Feistel structure represents a fundamental architectural component within the domain of symmetric cryptographic algorithms, with a substantial body of research conducted within the context of classical computing environments. Nevertheless, research into specific symmetric cryptographic algorithms utilizing the Feistel structure is relatively scarce in quantum computing environments. This paper builds upon a novel 4-round distinguisher proposed by Ito et al. for the Feistel structure under the quantum chosen-ciphertext attack (qCCA) setting. It introduces a 5-round distinguisher for Camellia. The efficacy of the distinguisher has been empirically validated. Furthermore, this paper combines Grover’s algorithm with Simon’s algorithm, utilizing an analysis of Camellia’s key scheduling characteristics to construct a 9-round key recovery attack on Camellia algorithm. The time complexity for acquiring the correct key bits is 2^{61.5}, and it requires 531 quantum bits. This represents the inaugural chosen-ciphertext attack on Camellia under the Q2 model.

ePrint: https://eprint.iacr.org/2024/1804

See all topics related to this paper.

Feel free to post resources that are related to this paper below.

Example resources include: implementations, explanation materials, talks, slides, links to previous discussions on other websites.

For more information, see the rules for Resource Topics .