Code for the Paper "Key Recovery Attacks on ZIP Ciphers: Application to ZIP-AES and ZIP-GIFT"

This paper is available as open access and on the IACR ePrint Archive. It can be cited using the following BibTeX record.

@article{tosc/NagelerCSE26,
  author       = {Marcel Nageler and Debasmita Chakraborty and Simon Scherer and Maria Eichlseder},
  title        = {Key Recovery Attacks on {ZIP} Ciphers: Application to {ZIP-AES} and {ZIP-GIFT}},
  journal      = {{IACR} Transactions on Symmetric Cryptology},
  number       = {2},
  volume       = {2026},
  year         = {2026},
  doi          = {10.46586/tosc.a0lmpak8nny},
  biburl       = {https://dblp.org/rec/journals/tosc/NagelerCSE26.bib},
  xurl         = {https://doi.org/10.46586/tosc.a0lmpak8nny},
}

Code Layout

You can find the relevant code in the directories ZIP-AES and ZIP-GIFT.

ZIP-AES/

Path	Description	Dependencies
Differential Cryptanalysis/	MiniZinc model for combined distinguisher and key recovery search	MiniZinc, OR-Tools, Python
Integral Cryptanalysis/	Experimental Evaluation of integral key recovery	C++, CMake
Linear Cryptanalysis/	MiniZinc byte-wise-model and Z3 model for bitwise trail	MiniZinc, Z3, Python

ZIP-GIFT/

Path	Description	Dependencies
Differential Cryptanalysis/	combined MiniZinc model, ciphertext filter, Autodiver	MiniZinc, Rust, Python, AutoDiVer
Integral Cryptanalysis/	MILP models for monomial prediction, key recovery analysis script	Gurobi, SageMath, Python
Linear Cryptanalysis/	MiniZinc distinguisher/key-recovery models	MiniZinc
gift-rs/	Implementation of ZIP-GIFT	Rust, C Compiler