Collision Attacks on AES-192/256, Crypton-192/256, mCrypton-96/128, and Anubis

Table 1

Our attack results on AES-192/256, Crypton-192/256, mCrypton-96/128, and Anubis.

Target Algorithm	Attack	Number of rounds	Data complexity	Computational complexity
AES-192	MitM [1]	7	2^40	2^80
	RKABA [10]	12	2^123	2^176
	CA (This paper)	7	2^32	2^69.2
AES-256	CA [3]	7	2^32	2^140
	RKBA [10]	14	2^99.5	2^99.5
	CA (This paper)	7	2^32	2^69.2
Crypton-192/256	TDC [8]	8	2^126	2^126.2
	CA (This paper)	8	2^96	2^161.6
mCrypton-96	RKIDC [9]	9	2^59.9	2^74.9
	CA (This paper)	8	2^48	2^81.6
mCrypton-128	RKIDC [9]	9	2^59.7	2^66.7
	CA (This paper)	8	2^48	2^81.6
Anubis	CA [11]	7	2^32	2^140
	Square [11]	7	2^128~2^119	2^120
	CA (This paper)	8	2^96	2^161.6

MitM: meet-in-the-middle attack.
TDC: truncated differential cryptanalysis.
RKABA: related-key amplified boomerang attack.
RKBA: related-key boomerang attack.
RKIDC: related-key impossible differential cryptanalysis.
CA: collision attack.