Information leakage of VGF2 structure (Q474782)

Summary: The block cipher VGF2 was designed at Inscrypt 2009 [\textit{L. Zhang} et al., Lect. Notes Comput. Sci. 6151, 215--229 (2010; Zbl 1281.94065)]. It was based on a new variant of generalized Feistel structure. By checking the property of the linear permutation, we find a full round differential in VGF2 with probability 1. Since this differential cannot distinguish the correct unknown key from the wrong keys, we fail in launching a key-recovery attack on this structure. However, we may guess half part of the plaintext without calculating the key. And we notice that this weakness may cause insecurity in some special environments.