Cryptanalysis of SPEED
C. Hall, J. Kelsey, V. Rijmen, B. Schneier, and D. Wagner.
Fifth Annual Workshop on Selected Areas in Cryptography, Springer Verlag, August 1998, to appear.
ABSTRACT: The cipher family SPEED (and an associated hashing mode) was recently proposed in Financial Cryptography '97. This paper cryptanalyzes that proposal, in two parts: First, we discuss several troubling potential weaknesses in the cipher. Next, we show how to efficiently break the SPEED hashing mode using differential related-key techniques, and propose a differential attack on 48-round SPEED. These results raise some significant questions about the security of the SPEED design.
Schneier.com is a personal website. Opinions expressed are not necessarily those of BT.