Differential faultt attack on DEFAULT

Abstract

<p style='text-indent:20px;'>Block cipher DEFAULT has been proposed as a differential fault analysis immune cipher at Asiacrypt 2021. In this paper, we consider the initial version of DEFAULT with no permutation involved in the last round and show that one can find the key in this version with complexity <inline-formula><tex-math id="M1">\begin{document}$ 2^{16} $\end{document}</tex-math></inline-formula> by injecting 112 faults. However, our idea does not work for the modified version of the cipher (where a key scheduling algorithm is involved).</p>