Differential-algebraic cryptanalysis of reduced-round of Serpent-256

查看全文 作　　者：WANG [1]MeiQin;WANG [1,2]XiaoYun;HUI Lucas [3]C.K.

机构地区：[1]Key Laboratory of Cryptologic Technology and Information Security, Ministry of Education, Shandong University, Jinan 250100, China;[2]Center for Advanced Study, Tsinghua University, Beijing 100084, China;[3]Department of Computer Science and Information Systems, The University of Hong Kong, Pokfulam Road, Hong Kong, China

出　　处：《Science China(Information Sciences)》索引2010年第53卷第3期,共11页

基　　金：supported by the National Basic Research Program of China (Grant No. 2007CB807902);the National Natural Science Foundation of China (Grant Nos. 60525201, 60910118) 摘　　要：Differential cryptanalysis is a general cryptanalytic tool that makes use of diFFerentials over some rounds of a cipher, combined with some key bit guesses of one or two rounds. This paper introduces a new cryptanalysis strategy of block ciphers named differential-algebraic cryptanalysis. The idea of differential-algebraic cryptanalysis is to find a differential with high probability and build the multivariable system equations for the last few rounds. The subkey values of the last few rounds can be obtained by filtering the solutions of system equations instead of guessing all possible subkey values. We use the differential-algebraic cryptanalysis to break 8-round Serpent-256. Our attack can recover the 256-bit key with 283 chosen plaintexts, 2180.4 8-round Serpent- 256 encryptions and 2176.7 bytes memory. Compared with the previous differential cryptanalysis results, both the data complexity and the time complexity are reduced, but the memory requirements are increased. The time complexity and the memory requirements are very close, and a time-memory tradeoff is exploited. 关键词：差分密码分析微分代数多变量系统时间复杂度时间复杂性国防缩减分析工具

相关文献

参考文献（10）
引证文献（2）
耦合文献（0）

参考文献(10)

引证文献(2)

互联网出版许可证新出网证(渝)字10号全国400电话 - 免长途话费

Differential-algebraic cryptanalysis of reduced-round of Serpent-256

参考文献(10)

引证文献(2)

用户提示