Impossible Differential on 8-Round MARS' Core.
Eli Biham, Vladimir Furman · 2000
MARS is one of the AES finalists. The up-to-date analysis of MARS includes the discovery of weak keys, and Biham's estimation that a 12round variant of MARS is breakable. This estimation was partly founded based on a 7-round impossible differential of the core of MARS. However, no such attack was presented to-date. In this paper we presenttwo new longer impossible differentials of 8 rounds.