Midori-64算法的截断不可能差分分析

分析了Midori-64算法在截断不可能差分攻击下的安全性.首先，通过分析Midori算法加、解密过程差分路径规律，证明了Midori算法在单密钥条件下的截断不可能差分区分器至多6轮，并对6轮截断不可能差分区分器进行了分类；其次，根据分类结果，构造了一个6轮区分器，并给出11轮Midori-64算法的不可能差分分析，恢复了128比特主密钥，其时间复杂度为2^121.4，数据复杂度为2^60.8，存储复杂度为2^96.5.

Truncated Impossible Differential Cryptanalysis of Midori-64

The security of Midori-64 under truncated impossible differential cryptanalysis was studied. Firstly, by analyzing the differential paths of Midori in encryption and decryption direction, it was proved that the upper bound for the rounds of impossible differential distinguishers in single-key setting for Midori is 6. And the 6-round truncated impossible differential distinguisher was classified. Secondly, based on the classification, a 6-round distinguisher was constructed. At the same time the impossible differential attack on 11-round Midori-64 was given to recover the 128-bit master key with a time complexity of 2^121.4 11-round encryptions, a data complexity of 2^60.8 chosen-plaintexts, and a memory complexity of 2^96.5 64-bit blocks.