Anzeige
Erschienen in:
2009 | OriginalPaper | Buchkapitel
Cryptanalysis of C2
verfasst von : Julia Borghoff, Lars R. Knudsen, Gregor Leander, Krystian Matusiewicz
Erschienen in: Advances in Cryptology - CRYPTO 2009
Verlag: Springer Berlin Heidelberg
Aktivieren Sie unsere intelligente Suche, um passende Fachinhalte oder Patente zu finden.
Wählen Sie Textabschnitte aus um mit Künstlicher Intelligenz passenden Patente zu finden. powered by
Markieren Sie Textabschnitte, um KI-gestützt weitere passende Inhalte zu finden. powered by
We present several attacks on the block cipher C2, which is used for encrypting DVD Audio discs and Secure Digital cards. C2 has a 56 bit key and a secret 8 to 8 bit S-box. We show that if the attacker is allowed to choose the key, the S-box can be recovered in 2
24
C2 encryptions. Attacking the 56 bit key for a known S-box can be done in complexity 2
48
. Finally, a C2 implementation with a 8 to 8 bit secret S-box (equivalent to 2048 secret bits) and a 56 bit secret key can be attacked in 2
53.5
C2 encryptions on average.