Integral fault analysis of Midori64 lightweight cipher
Yuechuan Wei, Xiangru Wang, Zichen Zhou · 2022
Midori is a low energy block cipher proposed at ASIACRYPT 2015. It is composed of two variants: Midori64 and Midori128, with block sizes equal to 64 and 128 bits respectively. These two ciphers provide the function of both encryption and decryption for security communication and storage with minimal area and energy overhead. In this paper, the immunity of Midori64 against integral fault attacks is investigated. Based on integral properties of Midori64 and fault model, a method to broken this cipher is presented. By injecting random faults in the 5th round backwards in the encryption process, the faulty ciphertexts are obtained. Based on 4-round integral distinguisher of Midori64, the last round key is recovered by flittering the wrong key values. The experimental simulation results show that the key candidate values can be reduced from 264 to 231.2 by 16 sets faults injection. Using the last round key to decrypt the ciphertexts by one round, a same method can be used to recover the penultimate round key and thus the master key can be recovered by using the key expansion algorithm.