Truncated differential cryptanalysis

In cryptography, truncated differential cryptanalysis is a generalization of differential cryptanalysis, an attack model against block ciphers. In 1994 Lars Knudsen designed the technique, during this period ordinary differential cryptanalysis analyzes the full difference between two texts, the truncated version considers differences that are only determined to some extent. It has been applied to SAFER, IDEA, Skipjack, E2, Twofish, Camellia, CRYPTON, and the stream cipher Salsa20 as well.

References

• Lars Knudsen (1994). "Truncated and Higher Order Differentials" (PDF/PostScript). : 196–211Leuven: Springer-Verlag. Retrieved on 2007-02-14. 
• Lars Knudsen, Thomas Berson (1996). "Truncated Differentials of SAFER" (PDF/PostScript). : 15–26Cambridge: Springer-Verlag. Retrieved on 2007-02-27. 
• Johan Borst, Lars R. Knudsen, Vincent Rijmen (May 1997). "Two Attacks on Reduced IDEA" (gzipped PostScript). : 1–13Konstanz: Springer-Verlag. Retrieved on 2007-03-08. 
• Lars Knudsen, M.J.B. Robshaw, David Wagner (1999). "Truncated Differentials and Skipjack" (PostScript). : 165–180Santa Barbara, California: Springer-Verlag. Retrieved on 2007-02-27. 
• M. Matsui, T. Tokita (1999). "Cryptanalysis of a Reduced Version of the Block Cipher E2" (PDF). : 71–80Rome: Springer-Verlag. Retrieved on 2007-02-27. 
• Shiho Moriai, Yiqun Lisa Yin (2000). "Cryptanalysis of Twofish (II)" (PDF). Retrieved 2007-02-27. {{cite journal}}: Cite journal requires |journal= (help)
• Paul Crowley (2006). "Truncated differential cryptanalysis of five rounds of Salsa20". Retrieved 2007-02-27.