University of Luton
The authors propose a tool for automatic search for differential trails in ARX ciphers. By introducing the concept of a partial Difference Distribution Table (pDDT) they extend Matsui's algorithm, originally proposed for DES-like ciphers, to the class of ARX ciphers. To the best of their knowledge this is the first application of Matsui's algorithm to ciphers that do not have S-boxes. The tool is applied to the block ciphers TEA, XTEA, SPECK and RAIDEN. For RAIDEN they find an iterative characteristic on all 32 rounds that can be used to break the full cipher using standard differential cryptanalysis.