Truncated differential cryptanalysis of PRINCE

Abstract PRINCE is a lightweight block cipher whose block size and key size are 64‐bit and 128‐bit, respectively. The core component of PRINCE is PRINCE which is wrapped by the initial and final key whitening. PRINCE c o r e adopts a 12‐round SPN structure. This paper exploits some new vulnerabilities of PRINCE from an aspect different from previous results, and applies truncated differential cryptanalysis to PRINCE. The result demonstrates that for several reduced versions of PRINCE, there exist 5‐round and 6‐round (out of 12 rounds) truncated differential distinguishers. We introduce a key‐recovery attack on 7‐round PRINCE c o r e using two 5‐round distinguishers, the data complexity is 2 50 chosen plaintexts and the time complexity is 2 48.2 7‐round encryptions, with a storage of about 2 22.6 counters. Both the distinguishers and key‐recovery attacks are not related to the value of α . Copyright © 2015 John Wiley & Sons, Ltd.