Cryptanalysis of Substitution Cipher Chaining Mode (SCC)

In this paper, we cryptanalyze the substitution cipher chaining mode (SCC-128), which uses three keys. The first key is the encryption key, which we were able to recover with about 2⁴⁰ cipher executions and 5 times 2⁸ chosen plaintexts. The second key is responsible of generation two layers of masks, we recovered the first layer with 2¹³ chosen plaintext and 2²¹ cipher executions and our attack to recover the second layer costs only one known sector plaintext and 64 cipher executions. The third key is used to generate the encrypted sector ID, we were able to recover the encrypted sector ID of a sector with I known plaintext and 2 cipher executions for each sector.