Fault Analysis of the Piccolo Block Cipher

We present several types of fault based attacks on the new lightweight block cipher Piccolo. The cipher is a variant of a generalized Feistel network (GFN) while the round keys are not involved in the F-function. This leads to an interesting principle which can be used to simplify our attacks. We describe our results from the simplest fault model to more realistic one. Simulation results show that using very few correct and faulty cipher texts, the exact number can be varied depending on different fault models, we are sufficient to reduce the key candidates to the practical level within exhaustive key search. In the best case 2 pairs of correct and faulty cipher texts with faults injected in the 3rd round from the last can recovery 64 bits out of the 80-bit master key.