Cryptanalysis of SAFER++

This paper presents several multiset and boomerang attacks on Safer++ up to 5.5 out of its 7 rounds. These are the best known attacks for this cipher and significantly improve the previously known results. The attacks in the paper are practical up to 4 rounds. The methods developed to attack Safer++ can be applied to other substitutionpermutation networks with incomplete diffusion.

• Type: Conference
• Year: 2003
• Where: CRYPTO
• Authors: Alex Biryukov, Christophe De Cannière, Gustaf Dellkrantz
• Keywords: Boomerang Attacks, CRYPTO 2003, Multiset, Paper