Abstract. Large weak key classes of IDEA are found for which membership is tested with a differential-linear test while encrypting with a single key. In particular, one in every 2'' keys for 8.5-round IDEA is weak. A related-key differential-linear attack on 4-round IDEA is presented which is successful for all keys. Large weak key classes are found for 4.5-to 6.5-round and 8-round IDEA for which membership of these classes is tested using similar related-key differential-linear tests.
Moreover, he identified large weak key classes for 4.5-6.5 rounds and 8 rounds of the algorithm REF .
Differential-Linear Weak Key Classes of IDEA
Advances in Cryptology --- EUROCRYPT '98 Proceedings
Computer Science