Linear cryptanalysis reduced round of piccolo-80

Tomer Ashur, Orr Dunkelman, Nael Masalha

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review


Piccolo is a 64-bit lightweight block cipher suitable for constrained environments such as wireless sensor networks. In this paper we evaluate the security of Piccolo-80 against linear cryptanalysis, we present a 6-round linear approximation of Piccolo-80 with probability (formula presented). We use this approximation to attack 7-round Piccolo-80 (with whitening keys) with data complexity of 261 known plaintexts and time complexity of 261. Its extension to an 8-round attack merely increases the time complexity to 270. This is the best linear attack against Piccolo-80 and it is also applicable to Piccolo-128 as the difference between the two variates is only the number of rounds and the key schedule algorithm. Moreover, we show that the bias in the approximation of the F-function, in some cases, is related to the MSB of the input. We utilize this relation to efficiently extract the MSBs of the whitening keys in the first round.

Original languageEnglish
Title of host publicationCyber Security Cryptography and Machine Learning - 3rd International Symposium, CSCML 2019, Proceedings
EditorsShlomi Dolev, Danny Hendler, Sachin Lodha, Moti Yung
PublisherSpringer Verlag
Number of pages17
ISBN (Print)9783030209506
StatePublished - 2019
Event3rd International Symposium on Cyber Security Cryptography and Machine Learning, CSCML 2019 - Beer Sheva, Israel
Duration: 27 Jun 201928 Jun 2019

Publication series

NameLecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume11527 LNCS
ISSN (Print)0302-9743
ISSN (Electronic)1611-3349


Conference3rd International Symposium on Cyber Security Cryptography and Machine Learning, CSCML 2019
CityBeer Sheva

Bibliographical note

Publisher Copyright:
© Springer Nature Switzerland AG 2019.


  • Linear cryptanalysis
  • Piccolo

ASJC Scopus subject areas

  • Theoretical Computer Science
  • General Computer Science


Dive into the research topics of 'Linear cryptanalysis reduced round of piccolo-80'. Together they form a unique fingerprint.

Cite this