Related-Key Multiple Impossible Differential Cryptanalysis on Full-Round LiCi-2 Designed for IoT

Table 1

Summary of previous results on LiCi-1 and LiCi-2.

Cipher	Type of attack	Attacked/total rounds	Length of the distinguisher	Time complexity	Memory complexity	Data complexity	Reference
LiCi-1	Linear	16/32	—	—	—	2^106	[7]
	Differential	16/32	—	—	—	2^96
	Integral	13/32	12	2^83	2^41	2^63	[16]
		16/32	10	2^173	2^119	2^63.6
	Impossible differential	16/32	10	2^83.08	2^76.76	2^59.76	[17]
LiCi-2	Linear	20/25	—	—	—	2^106	[8]
	Differential	20/25	—	—	—	2^80
	Impossible differential	25/25	18	2^123.44	2^94	2^60.68	This paper