A practical attack on 8-round Camellia-128

Block cipher is always the core encryption algorithm of information system. Camellia is a famous block cipher. Some 5-round distinguishers of Camellia are found in this paper. By exploiting the property of the key schedule for Camellia-128 and the meet-in-the-middle attack method, we present an attack on 8-round Camellia-128. The data complexity is only 2¹³ chosen plaintexts and the time complexity is 2⁵⁸ encryptions. This is the best cryptanalytic result for 8-round Camellia-128 in the single-key model. Furthermore, our attack is the first practical attack for the 8-round Camellia-128.