Decomposition attack on SASASASAS.
Alex Biryukov, Dmitry Khovratovich · 2015
We demonstrate the first attacks on the SPN ciphers with 6, 7, 8, and 9 secret layers. In particular, we show a decomposition attack on the SASASASAS scheme when the S-box size m and the block length n satisfy the condition m2 ≤ n (for example, 8-bit S-box and 128-bit block). 1