Improved integral attacks on PRESENT-80

Abstract

In this paper, we propose an improved integral attack against round-reduced PRESENT-80. First, we find a new 7-round integral distinguisher by analyzing the algebraic degree of PRESENT. Then, we propose an algebraic method to recover the master key by solving a system of linear equations which are extracted from the last three rounds of the cipher. Using this method, we can attack 10-round PRESENT-80 with time complexity 227.6 and data complexity 227, and 12-round PRESENT-80 with time complexity 266 and data complexity 264. Moreover, a key partition technique is proposed to gain one more round such that we could attack 11-round PRESENT-80 with time complexity 258 and data complexity 248, and 13-round PRESENT-80 with time complexity 274 and data complexity 264.