Truncated, Impossible, and Improbable Differential Analysis of ASCON

ASCON is an authenticated encryption algorithm which is recently qualified for the second-round of the Competition for Authenticated Encryption: Security, Applicability, and Robustness. So far, successful differential, differential-linear, and cube-like attacks on the reduced-round ASCON are provided. In this work, we provide the inverse of ASCON’s linear layer in terms of rotations which can be used for constructing impossible differentials. We show that ASCON’s S-box contains 35 undisturbed bits and we use them to construct 4 and 5round truncated, impossible, and improbable differential distinguishers. Our results include practical 4-round truncated, impossible, and improbable differential attacks on ASCON. Our best attacks using these techniques break 5 out of 12 rounds. These are the first successful truncated, impossible, and improbable differential attacks on the reduced-round ASCON.

• Publication year

  2016

• Venue

  International Conference on Information Systems Security and Privacy

• Publication date

  2016-12-04

• Fields of study

  Mathematics, Computer Science

• Identifiers
  DOI 10.5220/0005689903250332
• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• Structural Evaluation by Generalized Integral Property

  2015cited by this paper
• Lightweight cryptography for security and privacy : Third International Workshop, LightSec 2014, Istanbul, Turkey, September 1-2, 2014 : revised selected papers

  2015cited by this paper
• Cryptanalysis of Ascon

  2015influential reference
• Differential Factors: Improved Attacks on SERPENT

  2014influential reference
• Beyond 2c/2 Security in Sponge-Based Authenticated Encryption Modes

  2014cited by this paper
• Relating Undisturbed Bits to Other Properties of Substitution Boxes

  2014cited by this paper
• Permutation-based encryption , authentication and authenticated encryption

  2012cited by this paper
• Improbable differential attacks on Present using undisturbed bits

  2012cited by this paper
• On the invertibility of the XOR rotations of a binary word

  2010cited by this paper
• The Improbable Differential Attack: Cryptanalysis of Reduced Round CLEFIA

  2010cited by this paper
• Cryptanalysis of Skipjack Reduced to 31 Rounds Using Impossible Differentials

  1999cited by this paper
• Serpent: A New Block Cipher Proposal

  1998cited by this paper
• Truncated and Higher Order Differentials

  1994cited by this paper
• Differential cryptanalysis of DES-like cryptosystems

  1990cited by this paper
• Linear Structures in Blockciphers

  1987cited by this paper

• A Severe Vulnerability and an Effective Defense Against DFA on Ascon

  2025cites this paper
• Nonlinear degree of Ascon permutation

  2025cites this paper
• Distinguisher for Substitution-Permutation Network

  2025cites this paper
• Differential Cryptanalysis using Reinforcement Learning on round-reduced Ascon

  2025cites this paper
• Cryptanalysis: Theory Versus Practice Correcting Cryptanalysis Results on Ascon, ChaCha, and Serpent Using GPUs

  2025influential citation
• A quantitative security analysis of S-boxes in the NIST lightweight cryptography finalists

  2024cites this paper
• Implementation of Cryptanalytic Program for ASCON Using ChatGPT

  2024cites this paper
• Enhancing Security and Power Efficiency of Ascon Hardware Implementation with STT-MRAM

  2024cites this paper
• Augmented sets of output differences and new distinguishers for SPN ciphers

  2024cites this paper
• New Differential-Based Distinguishers for Ascon via Constraint Programming

  2024cites this paper
• On Impossible and Truncated Distinguishers for IoT-Friendly AEAD Algorithms

  2024cites this paper
• On Maximum Size Simultaneous Linear Approximations in Ascon and Keccak and Related Translation and Differential Properties

  2024influential citation
• Generic CPA Decryption Attack on Ascon-128 in Nonce-Misuse Setting by Exploiting XOR Patterns

  2024cites this paper
• Improved 2-round collision attack on IoT hash standard ASCON-HASH

  2024cites this paper
• Partial Differential Fault Analysis on Ascon

  2024cites this paper
• Quantum circuit implementations of lightweight authenticated encryption ASCON

  2024cites this paper
• A Comprehensive Survey on the Implementations, Attacks, and Countermeasures of the Current NIST Lightweight Cryptography Standard

  2023cites this paper
• Substitution Layer Analysis of NIST Lightweight Cryptography Competition Finalists

  2022cites this paper
• Differential-linear Attacks on Permutation Ciphers Revisited: Experiments on Ascon and DryGASCON

  2022cites this paper
• Revisiting Higher-Order Differential(-Linear) Attacks from an Algebraic Perspective - Applications to Ascon, Grain v1, Xoodoo, and ChaCha

  2022cites this paper
• Analysis of Practical Application of Lightweight Cryptographic Algorithm ASCON

  2022cites this paper
• Misuse-Free Key-Recovery and Distinguishing Attacks on 7-Round Ascon

  2021cites this paper
• Status Report on the Second Round of the NIST Lightweight Cryptography Standardization Process

  2021cites this paper
• Ascon v1.2: Lightweight Authenticated Encryption and Hashing

  2021cites this paper
• SSFA: Subset fault analysis of ASCON-128 authenticated cipher

  2021cites this paper
• Analysis of Ascon, DryGASCON, and Shamash Permutations

  2020influential citation
• Status Update on Ascon v1.2

  2020cites this paper
• NIST Update: ISAP v2.0

  2020cites this paper
• Security arguments and tool-based design of block ciphers

  2020cites this paper
• Authenticated Encryption E ( K , N , A , M )

  2019cites this paper
• Collision Attacks on Round-Reduced Gimli-Hash/Ascon-Xof/Ascon-Hash

  2019cites this paper
• A Survey on Lightweight Authenticated Encryption and Challenges for Securing Industrial IoT

  2019cites this paper
• SoK: Peigen - a Platform for Evaluation, Implementation, and Generation of S-boxes

  2019cites this paper
• Searching for Subspace Trails and Truncated Differentials

  2018cites this paper
• Differential Attacks on Reduced Round LILLIPUT

  2018cites this paper
• Differential Attacks on LILLIPUT Cipher

  2017cites this paper