Quantum cryptanalysis of ciphers based on generalized Feistel and Lai-Massey schemes

Authors

DOI:

https://doi.org/10.20535/tacs.2664-29132025.3.347525

Abstract

This paper investigates generalizations of the Lai-Massey scheme, including unified constructions
combining it with the Feistel scheme (MD GLM, UFLM, L-Feistel, and quasi-Feistel). New reductions
to the quasi-Feistel scheme are provided. Known efficient quantum attacks are analyzed, including
chosen-plaintext attacks on 3 rounds and chosen-ciphertext attacks on 4 rounds for a special case of the
quasi-Feistel cipher using Simon’s algorithm. It is demonstrated that restrictions in that work led to the
degeneration of the quasi-Feistel scheme into the standard Feistel scheme, replicating known quantum
attacks on the Feistel scheme. New two-round distinguishing attacks are presented for the L-Feistel and
MD-1 GLM schemes, enabling round key recovery.

Downloads

Published

2025-12-28

Issue

Section

Theoretical and cryptographic problems of cybersecurity