{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,9]],"date-time":"2026-01-09T17:28:55Z","timestamp":1767979735552,"version":"3.49.0"},"reference-count":24,"publisher":"Oxford University Press (OUP)","issue":"12","license":[{"start":{"date-parts":[[2019,7,3]],"date-time":"2019-07-03T00:00:00Z","timestamp":1562112000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/academic.oup.com\/journals\/pages\/open_access\/funder_policies\/chorus\/standard_publication_model"}],"funder":[{"name":"National Cryptography Development Fund","award":["MMJJ20180202"],"award-info":[{"award-number":["MMJJ20180202"]}]},{"DOI":"10.13039\/501100012558","name":"Foundation of Science and Technology on Information Assurance Laboratory","doi-asserted-by":"publisher","award":["KJ-17-008"],"award-info":[{"award-number":["KJ-17-008"]}],"id":[{"id":"10.13039\/501100012558","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2019,12,10]]},"abstract":"<jats:title>Abstract<\/jats:title><jats:p>Kiasu-BC and Joltik-BC are internal tweakable block ciphers of authenticated encryption algorithms Kiasu and Joltik submitted to the CAESAR competition. Kiasu-BC is a 128-bit block cipher, of which tweak and key sizes are 64 and 128 bits, respectively. Joltik-BC-128 is a 64-bit lightweight block cipher supporting 128 bits tweakey. Its designers recommended the key and tweak sizes are both 64 bits. In this paper, we propose improved meet-in-the-middle attacks on 8-round Kiasu-BC, 9-round and 10-round Joltik-BC-128 by exploiting properties of their structures and using precomputation tables and the differential enumeration. For Kiasu-BC, we build a 5-round distinguisher to attack 8-round Kiasu-BC with $2^{109}$ plaintext\u2013tweaks, $2^{112.8}$ encrytions and $2^{92.91}$ blocks. Compared with previously best known cryptanalytic results on 8-round Kiasu-BC under chosen plaintext attacks, the data and time complexities are reduced by $2^{7}$ and $2^{3.2}$ times, respectively. For the recommended version of Joltik-BC-128, we construct a 6-round distinguisher to attack 9-round Joltik-BC-128 with $2^{53}$ plaintext\u2013tweaks, $2^{56.6}$ encryptions and $2^{52.91}$ blocks, respectively. Compared with previously best known results, the data and time complexities are reduced by $2^7$ and $2^{5.1}$ times, respectively. In addition, we present a 6.5-round distinguisher to attack 10-round Joltik-BC-128 with $2^{53}$ plaintext\u2013tweaks, $2^{101.4}$ encryptions and $2^{76.91}$ blocks.<\/jats:p>","DOI":"10.1093\/comjnl\/bxz059","type":"journal-article","created":{"date-parts":[[2019,5,14]],"date-time":"2019-05-14T11:17:44Z","timestamp":1557832664000},"page":"1761-1776","source":"Crossref","is-referenced-by-count":7,"title":["Improved Meet-in-the-Middle Attacks on Reduced-Round Kiasu-BC and Joltik-BC"],"prefix":"10.1093","volume":"62","author":[{"given":"Ya","family":"Liu","sequence":"first","affiliation":[{"name":"Engineering Research Center of Optical Instrument and System, Ministry of Education, Shanghai Key Lab of Modern Optical System, University of Shanghai for Science and Technology, Shanghai 200093, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yifan","family":"Shi","sequence":"additional","affiliation":[{"name":"Engineering Research Center of Optical Instrument and System, Ministry of Education, Shanghai Key Lab of Modern Optical System, University of Shanghai for Science and Technology, Shanghai 200093, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Dawu","family":"Gu","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Engineering, Shanghai Jiao Tong University, Shanghai 200240, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zhiqiang","family":"Zeng","sequence":"additional","affiliation":[{"name":"Science and Technology on Information Assurance Laboratory, Beijing 100072, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Fengyu","family":"Zhao","sequence":"additional","affiliation":[{"name":"Engineering Research Center of Optical Instrument and System, Ministry of Education, Shanghai Key Lab of Modern Optical System, University of Shanghai for Science and Technology, Shanghai 200093, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Wei","family":"Li","sequence":"additional","affiliation":[{"name":"School of Computer Science and Technology, Donghua University, Shanghai 201620, China"},{"name":"Shanghai Key Laboratory of Scalable Computing and Systems, Shanghai, 200240, China"},{"name":"Shanghai Key Laboratory of Integrate Adminstration Technologies for Information Security, Shanghai 200240, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zhiqiang","family":"Liu","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Engineering, Shanghai Jiao Tong University, Shanghai 200240, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yang","family":"Bao","sequence":"additional","affiliation":[{"name":"Engineering Research Center of Optical Instrument and System, Ministry of Education, Shanghai Key Lab of Modern Optical System, University of Shanghai for Science and Technology, Shanghai 200093, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"286","published-online":{"date-parts":[[2019,7,3]]},"reference":[{"key":"2019121909072612300_ref1","doi-asserted-by":"crossref","first-page":"588","DOI":"10.1007\/3-540-45708-9_3","article-title":"Tweakable block ciphers","volume-title":"Proc. Advances in Cryptology - CRYPTO 2002, CA, USA, August 18\u201322, pp.","author":"Liskov","year":"2002"},{"key":"2019121909072612300_ref2","first-page":"306","article-title":"The software performance of authenticated-encryption modes","volume-title":"Proc. Fast Software Encryption - FSE 2014,","author":"Krovetz","year":"2011"},{"key":"2019121909072612300_ref3","doi-asserted-by":"crossref","first-page":"33","DOI":"10.1007\/978-3-662-53018-4_2","article-title":"Counter-in-tweak: authenticated encryption modes for tweakable block ciphers","volume-title":"Proc. Advances in Cryptology - CRYPTO 2016, CA, USA, August 14\u201318, pp.","author":"Peyrin","year":"2016"},{"key":"2019121909072612300_ref4","first-page":"274","article-title":"Tweaks and keys for block ciphers: the TWEAKEY framework","volume-title":"Proc. Advances in Cryptology - ASIACRYPT 2010, Kaoshiung,","author":"Jean","year":"2014"},{"key":"2019121909072612300_ref5","doi-asserted-by":"crossref","first-page":"645","DOI":"10.1007\/s10623-013-9882-8","article-title":"Building blockcipher from small-block tweakable blockcipher","volume":"74","author":"Minematsu","year":"2015","journal-title":"Designs Codes Cryptography"},{"key":"2019121909072612300_ref6","volume-title":"KIASU Submission to the CAESAR competition","author":"Jean","year":"2018"},{"key":"2019121909072612300_ref7","article-title":"Joltik","author":"Jean","journal-title":"Submission to the CAESAR competition."},{"key":"2019121909072612300_ref8","volume-title":"Joltik\u2014Pok\u00e9dex.","author":""},{"key":"2019121909072612300_ref9","first-page":"500","article-title":"Proc. Int. Conf. Applied Cryptography and Network Security - ACNS 2016, Guildford, UK, June 19\u201322","volume-title":"Square attack on 7-round Kiasu-BC","author":"Dobraunig","year":"2016"},{"key":"2019121909072612300_ref10","volume-title":"Impossible differential cryptanalysis of 8-round Kiasu-BC","author":"Abdelkhalek","year":"2016"},{"key":"2019121909072612300_ref11","first-page":"E99","article-title":"A meet in the middle attack on reduced round Kiasu-BC","author":"Tolba","year":"2016","journal-title":"IEICE Trans. Fundamentals"},{"key":"2019121909072612300_ref12","first-page":"207","article-title":"Proc. Topics in Cryptology - CT-RSA 2017, CA, USA, February 14\u201317","volume-title":"Impossible-differential and boomerang cryptanalysis of roundrReduced Kiasu-BC","author":"Dobraunig","year":"2017"},{"key":"2019121909072612300_ref13","article-title":"MILP-aided related-tweak\/key impossible differential attack and its applications to QARMA","author":"Rui","journal-title":"Joltik-BC."},{"key":"2019121909072612300_ref14","first-page":"359","article-title":"Multiple impossible differentials cryptanalysis on 8-round Kiasu-BC","volume":"5","author":"Jiang","year":"2018","journal-title":"J. Cryptologic Res."},{"key":"2019121909072612300_ref15","first-page":"103","article-title":"Preimage attacks on one-block MD4, 63-step MD5 and more","volume-title":"Proc. Selected Areas in Cryptography - SAC 2008, New Brunswick, Canada, August 14\u201315, pp.","author":"Aoki","year":"2009"},{"key":"2019121909072612300_ref16","doi-asserted-by":"crossref","first-page":"134","DOI":"10.1007\/978-3-642-01001-9_8","article-title":"Finding preimages in full MD5 faster than exhaustive search","volume-title":"Proc. Advances in Cryptology - EUROCRYPT 2009, Cologne, Germany, April 26\u201330, pp.","author":"Sasaki","year":"2009"},{"key":"2019121909072612300_ref17","first-page":"116","article-title":"A meet-in-the-middle attack on 8-round AES","volume-title":"Proc. Fast Software Encryption - FSE 2008, Lausanne, Switzerland, February 10\u201313, pp.","author":"Demirci","year":"2008"},{"key":"2019121909072612300_ref18","first-page":"158","article-title":"Improved single-key attacks on 8-round AES-192 and AES-256. In Proc. Advances in Cryptology - ASIACRYPT 2010, Singapore, December 5\u20139","author":"Dunkelman","year":"2010"},{"key":"2019121909072612300_ref19","doi-asserted-by":"crossref","first-page":"371","DOI":"10.1007\/978-3-642-38348-9_23","article-title":"Improved key recovery attacks on reduced-round AES in the single-key setting","volume-title":"Proc. Advances in Cryptology C EUROCRYPT 2013, Athens, Greece, May 26\u201330, pp.","author":"Derbez","year":"2013"},{"key":"2019121909072612300_ref20","doi-asserted-by":"crossref","first-page":"458","DOI":"10.1007\/978-3-662-45611-8_24","article-title":"Meet-in-the-middle attacks on generic feistel constructions","volume-title":"Proc. Advances in Cryptology - ASIACRYPT 2014, Kaoshiung, Taiwan, December 7\u201311, pp.","author":"Guo","year":"2014"},{"key":"2019121909072612300_ref21","doi-asserted-by":"crossref","first-page":"459","DOI":"10.1007\/s10623-015-0113-3","article-title":"Meet-in-the-middle attacks on 10-round AES-256","volume":"80","author":"Li","year":"2016","journal-title":"Designs Codes Cryptography"},{"key":"2019121909072612300_ref22","doi-asserted-by":"crossref","first-page":"587","DOI":"10.1007\/s10623-015-0120-4","article-title":"Extended meet-in-the-middle attacks on some Feistel constructions","volume":"80","author":"Guo","year":"2016","journal-title":"Designs Codes Cryptography"},{"key":"2019121909072612300_ref23","doi-asserted-by":"crossref","first-page":"307","DOI":"10.46586\/tosc.v2016.i2.307-337","article-title":"Meet-in-the-middle attacks on classes of contracting and expanding Feistel constructions","volume":"2016","author":"Guo","year":"2017","journal-title":"IACR Transact. Symmetric Cryptol."},{"key":"2019121909072612300_ref24","article-title":"The Design of Rijndael: AES - The Advanced Encryption Standard","volume-title":"Information Security and Cryptography","author":"Daemen","year":"2002"}],"container-title":["The Computer Journal"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/academic.oup.com\/comjnl\/article-pdf\/62\/12\/1761\/31568631\/bxz059.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"http:\/\/academic.oup.com\/comjnl\/article-pdf\/62\/12\/1761\/31568631\/bxz059.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2020,12,12]],"date-time":"2020-12-12T19:34:01Z","timestamp":1607801641000},"score":1,"resource":{"primary":{"URL":"https:\/\/academic.oup.com\/comjnl\/article\/62\/12\/1761\/5525447"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,7,3]]},"references-count":24,"journal-issue":{"issue":"12","published-online":{"date-parts":[[2019,7,3]]},"published-print":{"date-parts":[[2019,12,10]]}},"URL":"https:\/\/doi.org\/10.1093\/comjnl\/bxz059","relation":{},"ISSN":["0010-4620","1460-2067"],"issn-type":[{"value":"0010-4620","type":"print"},{"value":"1460-2067","type":"electronic"}],"subject":[],"published-other":{"date-parts":[[2019,12]]},"published":{"date-parts":[[2019,7,3]]}}}