{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2024,8,9]],"date-time":"2024-08-09T17:09:09Z","timestamp":1723223349778},"reference-count":20,"publisher":"Oxford University Press (OUP)","issue":"5","license":[{"start":{"date-parts":[[2022,2,23]],"date-time":"2022-02-23T00:00:00Z","timestamp":1645574400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/academic.oup.com\/journals\/pages\/open_access\/funder_policies\/chorus\/standard_publication_model"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2023,5,19]]},"abstract":"<jats:title>Abstract<\/jats:title>\n               <jats:p>FOX block cipher was designed with a Lai\u2013Massey scheme, in which the round function uses the Substitution-Permutation-Substitution structure. A meet-in-the-middle (MITM) attack is one of the most important issues for the security of the block cipher, which consists of a precomputation phase for constructing a distinguisher and an online phase for key recovery. This paper studies the MITM attacks against FOX. The first MITM distinguishers of 5-round FOX64, 7-round FOX64-256 and 5-round FOX128 are presented when using the differential enumeration technique with truncated differential characteristics. Then, based on these distinguishers, the attacks for key recovery on 7-round FOX64, 11-round FOX64-256 and 7-round FOX128 are presented with the state-test and state-search techniques. It is shown that the attack on 11-round FOX64-256 is proposed for the first time; attacks on 7-round FOX64 and 7-round FOX128 can be improved with lower time and memory complexities compared with the currently known attacks.<\/jats:p>","DOI":"10.1093\/comjnl\/bxac007","type":"journal-article","created":{"date-parts":[[2022,1,14]],"date-time":"2022-01-14T12:07:22Z","timestamp":1642162042000},"page":"1195-1212","source":"Crossref","is-referenced-by-count":1,"title":["New Meet-in-the-Middle Attacks on FOX Block Cipher"],"prefix":"10.1093","volume":"66","author":[{"given":"Xiaoli","family":"Dong","sequence":"first","affiliation":[{"name":"School of Cyberspace Security , Xian University of Posts and Telecommunications, Xi\u2019an 710121 , China"},{"name":"Guangxi Key Laboratory of Cryptography and Information Security , Guilin 541004 , China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yongzhuang","family":"Wei","sequence":"additional","affiliation":[{"name":"Shool of Compute Science and Information Security , Guilin University of Electronic Technology, Guangxi 541004 , China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Wen","family":"Gao","sequence":"additional","affiliation":[{"name":"School of Cyberspace Security , Xian University of Posts and Telecommunications, Xi\u2019an 710121 , China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jie","family":"Chen","sequence":"additional","affiliation":[{"name":"School of Telecommunication Engineering , Xidian University, Xi\u2019an 710068 , China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"286","published-online":{"date-parts":[[2022,2,23]]},"reference":[{"key":"2023052000434767800_ref1","first-page":"114","article-title":"FOX: a new namily of block ciphers. Selected Areas in Cryptography 2004","volume-title":"Lecturer Notes in Computer Science 3357","author":"Junod","year":"2004"},{"key":"2023052000434767800_ref2","first-page":"606","article-title":"New insights on AES-Like SPN ciphers. Advances in Cryptology-CRYPTO 2016","volume-title":"Lecturer Notes in Computer Science 9814","author":"Sun","year":"2016"},{"key":"2023052000434767800_ref3","first-page":"289","article-title":"A new structural-differential property of 5-Round AES. Advances in Cryptology-EUROCRYPT 2017","volume-title":"Lecturer Notes in Computer Science 10211","author":"Grassi","year":"2017"},{"key":"2023052000434767800_ref4","first-page":"217","article-title":"Yoyo Tricks with AES. Advances in Cryptology-ASIACRYPT 2017","volume-title":"Lecturer Notes in Computer Science 10624","author":"Ronjom","year":"2017"},{"key":"2023052000434767800_ref5","first-page":"347","article-title":"The Exchange Attack: How to Distinguish 6 Rounds of AES with 2$^88.2$ chosen plaintexts. Advances in Cryptology-ASIACRYPT 2019","volume-title":"Lecturer Notes in Computer Science 11923","author":"Bardeh","year":"2019"},{"key":"2023052000434767800_ref6","first-page":"117","article-title":"A new meet-in-the-middle attack on the IDEA block cipher. Selected Areas in Cryptography 2003","volume-title":"Lecturer Notes in Computer Science 3006","author":"Demiric","year":"2003"},{"key":"2023052000434767800_ref7","first-page":"116","article-title":"A meet in the middle attack on 8-round AES. Fast Software Encryption 2008","volume-title":"Lecturer Notes in Computer Science 5086","author":"Demiric","year":"2008"},{"key":"2023052000434767800_ref8","first-page":"158","article-title":"Improved single-key attacks on 8-round AES. Advances in Cryptology-ASIACRYPT 2010","volume-title":"Lecturer Notes in Computer Science 6477","author":"Nelman","year":"2010"},{"key":"2023052000434767800_ref9","first-page":"371","article-title":"Improved key recovery attacks on reduced-round AES in the single-key setting. Advances in Cryptology-EUROCRYPT 2013","volume-title":"Lecturer Notes in Computer Science 7881","author":"Derbez","year":"2013"},{"key":"2023052000434767800_ref10","first-page":"541","article-title":"Exhausting Demirci-Seluk Meet-in-the-Middle Attacks against Reduced-Round AES. Fast Software Encryption 2013","volume-title":"Lecturer Notes in Computer Science 7881","author":"Derbez","year":"2013"},{"key":"2023052000434767800_ref11","first-page":"127","article-title":"Improved Single-Key Attacks on 9-Round AES-192\/256. Fast Software Encryption 2014","volume-title":"Lecturer Notes in Computer Science 8540","author":"Li","year":"2014"},{"key":"2023052000434767800_ref12","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1007\/s10623-015-0113-3","article-title":"Meet-in-the-middle attacks on 10-round AES-256","volume":"80","author":"Li","year":"2016","journal-title":"Designs Codes & Cryptography"},{"key":"2023052000434767800_ref13","doi-asserted-by":"crossref","first-page":"2284","DOI":"10.1109\/ACCESS.2019.2962101","article-title":"Generalized meet in the middle cryptanalysis of block ciphers with an automated search algorithm","volume":"8","author":"Ahmadi","year":"2020","journal-title":"IEEE Access"},{"key":"2023052000434767800_ref14","first-page":"229","article-title":"Integral Cryptanalysis of Reduced FOX Block Cipher. Information Security and Cryptology 2005","volume-title":"Lecturer Notes in Computer Science 3935","author":"Wu","year":"2006"},{"key":"2023052000434767800_ref15","first-page":"236","article-title":"Improved cryptanalysis of the FOX block cipher. INTRUST 2009","volume-title":"Lecturer Notes in Computer Science 6163","author":"Wu","year":"2010"},{"key":"2023052000434767800_ref16","first-page":"71","article-title":"Differential collision attack on reduced fox block cipher","volume":"9","author":"Chen","year":"2012","journal-title":"China Communications"},{"key":"2023052000434767800_ref17","first-page":"104","article-title":"Improved all-subkeys recovery attacks on FOX, KATAN and SHACAL-2 block ciphers. Fast Software Encryption 2014","volume-title":"Lecturer Notes in Computer Science 8540","author":"Isobe","year":"2015"},{"key":"2023052000434767800_ref18","doi-asserted-by":"crossref","first-page":"541","DOI":"10.1093\/comjnl\/bxv073","article-title":"Improved results of impossible differential cryptanalysis on reduced FOX","volume":"59","author":"Li","year":"2016","journal-title":"The Computer Journal"},{"key":"2023052000434767800_ref19","first-page":"185","article-title":"Meet-in-the-middle attacks on FOX block cipher","volume":"37","author":"Li","year":"2016","journal-title":"J Commun"},{"key":"2023052000434767800_ref20","first-page":"179","article-title":"Scrutinizing and improving impossible differential attacks: applications to CLEFIA, Camellia, LBlock and Simon. Advances in Cryptology-Asiacrypt 2014","volume-title":"Lecturer Notes in Computer Science 8873","author":"Boura","year":"2014"}],"container-title":["The Computer Journal"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/academic.oup.com\/comjnl\/article-pdf\/66\/5\/1195\/50397679\/bxac007.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/academic.oup.com\/comjnl\/article-pdf\/66\/5\/1195\/50397679\/bxac007.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,5,20]],"date-time":"2023-05-20T00:46:29Z","timestamp":1684543589000},"score":1,"resource":{"primary":{"URL":"https:\/\/academic.oup.com\/comjnl\/article\/66\/5\/1195\/6535018"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,2,23]]},"references-count":20,"journal-issue":{"issue":"5","published-online":{"date-parts":[[2022,2,23]]},"published-print":{"date-parts":[[2023,5,19]]}},"URL":"https:\/\/doi.org\/10.1093\/comjnl\/bxac007","relation":{},"ISSN":["0010-4620","1460-2067"],"issn-type":[{"value":"0010-4620","type":"print"},{"value":"1460-2067","type":"electronic"}],"subject":[],"published-other":{"date-parts":[[2023,5]]},"published":{"date-parts":[[2022,2,23]]}}}