Attack on Six Rounds of Crypton

Abstract. In this paper we present an attack on a reduced round version of Crypton. The attack is based on the dedicated Square attack. We explain why the attack also works on Crypton and prove that the entire 256-bit user key for 6 rounds of Crypton can be recovered with a complexity of 256 encryptions, whereas for Square 272 encryptions are required to recover the 128-bit user key.

• Type: Conference
• Year: 1999
• Where: FSE
• Authors: Carl D'Halluin, Gert Bijnens, Vincent Rijmen, Bart Preneel
• Keywords: Cryptology, Dedicated Square Attack, Entire 256-bit User, FSE 1999, User Key