一類Feistel密碼的線性分析
Linear cryptanalysis for a class of feistel ciphers
-
摘要: 該文提出一種新的求取分組密碼線性偏差上界的方法,特別適用于密鑰線性作用的Feistel密碼。該分析方法的思路是,首先對(duì)密碼體制線性偏差進(jìn)行嚴(yán)格的數(shù)學(xué)描述,分別給出密碼線性偏差與輪函數(shù)F及S盒的線性偏差的數(shù)學(xué)關(guān)系;然后通過(guò)求取線性方程組最小重量解,確定密碼線性偏差的上界。
-
關(guān)鍵詞:
- 線性分析; 線性偏差表達(dá)式; Feistel密碼; 輪函數(shù); S盒
Abstract: In this paper, a new method is proposed for seeking the upper bounds of maximum linear bias for block ciphers, which is especially applicable to a class of Feistel ciphers that key is XORed with data. This technique consists of two steps. Firstly, the mathematical relationship between linear bias of ciphers and linear bias of round function F and S-box respectively is given by carrying out strictly mathematical expression of linear bias for ciphers. Next, the upper bounds of linear bias for ciphers are determined by seeking the solution with minimum weight for linear equation group. Using this method the upper bounds of linear bias within 32 rounds are given. -
M. Matsui.[J].Linear cryptanalysis method for DES ciper, Advances in Cryptology-Eurocrypt93,Berlin: Springer- Verlag.1993,:-[2]M. Kanda, Y. Takashima, T. Matsumoto, A strategy for constructing fast round function with practical security against differential and linear cryptanalysis, Selected Areas in Cryptography,Lecture Notes of Computer Science 1556, Springer-Verlag, 1999, 264-279.[3]M. Kanda, Practical security evaluation against differential and linear attacks for Feistel ciphers with SPN round function, Selected Areas in Cryptography, Lecture Notes of Computer Science 2012, Springer-Verlag, 2000, 324-338. -
計(jì)量
- 文章訪問數(shù): 2267
- HTML全文瀏覽量: 99
- PDF下載量: 473
- 被引次數(shù): 0