The lightweight block cipher PRIDE designed by Albrecht et al., appears in CRYPTO 2014. The designers claim that their method of constructing linear layer is good both in security and eciency. In this paper, we nd 16 dierent 2-round iterative characteristics utilizing the weaknesses of S-box and linear layer, construct several 15-round dier- entials. Based on one of the dierentials, we launch dierential attack on 18-round PRIDE. The data, time and memory complexity are 2 60 , 2 66 and 2 64 , respectively.
['Jingyuan Zhao', 'Xiaoyun Wang', 'Meiqin Wang', 'Xiaoyang Dong']
Differential Analysis on Block Cipher PRIDE.