Differential-Nonlinear Cryptanalysis of Reduced-Round SAFER++

SAFER++ is selected for further evaluation in NESSIE second phase. A technique which connects differential cryptanalysis and nonlinear cryptanalysis is used to attack 4,5 and 6 rounds of SAFER++. The results show that 6-round SAFER++ is not immune to this cryptanalysis, and this cryptanalysis is more effective when used to attack 4-round and 5-round SAFER++ than previous analysis.