Cryptanalysis of SPEED

Abstract. The cipher family SPEED (and an associated hashing mode) was recently proposed in Financial Cryptography '97. This paper cryptanalyzes that proposal, in two parts: First, we discuss several troubling potential weaknesses in the cipher. Next, we show how to efficiently break the SPEED hashing mode using differential related-key techniques, and propose a differential attack on 48-round SPEED. These results raise some significant questions about the security of the SPEED design.

• Type: Conference
• Year: 1998
• Where: FC
• Authors: Chris Hall, John Kelsey, Bruce Schneier, David Wagner
• Keywords: Cipher Family Speed, Cryptology, FC 1998, Hashing Mode, SPEED Hashing Mode