Cube attacks on round-reduced MORUS and GimLi  

作　　者：Siwei CHEN Zejun XIANG Xiangyong ZENG Shasha ZHANG 

机构地区：[1]Faculty of Mathematics and Statistics,Hubei Key Laboratory of Applied Mathematics,Hubei University,Wuhan 430062,China

出　　处：《Science China(Information Sciences)》2022年第1期261-263,共3页中国科学（信息科学）（英文版）

基　　金：supported by National Natural Science Foundation of China(Grant No.61802119)。

摘　　要：Dear editor,Cube attack is a chosen plaintext/initial value(IV)keyrecovery attack,which was proposed by Dinur and Shamir at EUROCRYPT 2009[1].As an important cryptanalysis technique,it is widely used in symmetric ciphers.The main ideal of cube attack is to look for cubes to acquire several linear polynomials(superpolys)with respect to secret variables.The secret variables can be recovered by solving these linear equations.However,thus far,no general method has been established to search for cubes.

关 键 词：EQUATIONS SYMMETRIC chosen 

分 类 号：TN918.1[电子电信—通信与信息系统]