We demonstrate the first attacks on the SPN ciphers with 6, 7, 8, and 9 secret components. In particular, we show a decomposition attack on the SASASASAS scheme when the S-box size $m$ and the block length $n$ satisfy the condition $m^2\leq n$ (for example, 8-bit S-box and 128-bit block).
↧