A new higher order differential of Camellia

Camellia was jointly proposed by NTT and Mitsubishi in 2000 [1]. Camellia is a 128-bit block cipher supporting key lengths of 128, 192, 256 bits. The best previous attack is Zero Correlation FFT attack proposed by Bogdanov et. al. [2] and 12-round Camellia with FL/FL
^-1
is attacked with 2
^125.7
blocks of known plaintexts and 2
^188.8
times of data encryption. In this paper, we focused on a higher order differential attack. We present 7-round 120-th order differential by using control transform for the input. We show 12-round Camellia with FL/FL
^-1
is attackable with 2
^124.6
blocks of chosen plaintexts and 2
^190.4
times of data encryption.