2001
DOI: 10.4218/etrij.01.0101.0402
|View full text |Cite
|
Sign up to set email alerts
|

Practical and Provable Security against Differential and Linear Cryptanalysis for Substitution-Permutation Networks

Abstract: We examine the diffusion layers of some block ciphers referred to as substitution‐permutation networks. We investigate the practical and provable security of these diffusion layers against differential and linear cryptanalysis. First, in terms of practical security, we show that the minimum number of differentially active S‐boxes and that of linearly active S‐boxes are generally not identical and propose some special conditions in which those are identical. We also study the optimal diffusion effect for some d… Show more

Help me understand this report

Search citation statements

Order By: Relevance

Paper Sections

Select...
3
1
1

Citation Types

1
29
0
1

Year Published

2002
2002
2023
2023

Publication Types

Select...
8

Relationship

0
8

Authors

Journals

citations
Cited by 39 publications
(31 citation statements)
references
References 13 publications
1
29
0
1
Order By: Relevance
“…Throughout this paper, we define wt(x) = wt( [9]. Therefore, we can define the branch number β l from the view point of linear cryptanalysis as follows: …”
Section: The Branch Number Of L From the View Point Of Differential Cmentioning
confidence: 99%
“…Throughout this paper, we define wt(x) = wt( [9]. Therefore, we can define the branch number β l from the view point of linear cryptanalysis as follows: …”
Section: The Branch Number Of L From the View Point Of Differential Cmentioning
confidence: 99%
“…Hong et al proved the upper bound on the maximum differential and the maximum linear hull probability for 2 rounds of SPN structures with highly diffusive linear transformation [7]. Kang et al generalized their result for any value of the branch number of the linear transformation [8].…”
Section: Introductionmentioning
confidence: 99%
“…A diffusion layer D taking its maximal β d and β l is called a perfect or MDS diffusion layer. Furthermore, a diffusion layer with β d = β l = s is called an almost perfect diffusion layer [10].…”
Section: Definition 2 ([4]mentioning
confidence: 99%
“…In the last 2 decades, from these two families several structures have been proposed with provable security against DC and LC. Three rounds of Feistel structure [12,9], five rounds of RC6-like structure [6] and SDS (substitution-diffusion-substitution) structure with a perfect or almost perfect diffusion layer are examples of such structures [10].…”
Section: Introductionmentioning
confidence: 99%