A new impossible differential attack on SAFER ciphers

Abstract: This paper presents an improved impossible differential cryptanalysis of SAFER ciphers, which uses the miss-in-the-middle technique developed by Biham et al. We analyze 3.75-round SAFER SK-64, [1] (In this paper, the number in the name of the ciphers indicates the key length). 1 using chosen plaintexts, bytes memory and half round computations. Furthermore, the new impossible differential attack on 3.75-round SAFER+/128 uses chosen plaintexts, half round computations and bytes memory. And attack on 3.75-round SAFER++/128 uses data, time, and memory. [Copyright &y& Elsevier]