“Provable” Security against Differential and Linear Cryptanalysis

Nyberg, Kaisa

doi:10.1007/978-3-642-34047-5_1

Cited by 4 publications

(3 citation statements)

References 29 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…This construction, a.k.a CRADIC [31], has been proposed by Nyberg and Knudsen in [9]. It is a six-round Feistel cipher over with a 198-bit secret key.…”

Section: A Attacking the -Cipher And Its Variantmentioning

confidence: 98%

On the Influence of the Algebraic Degree of $F^{-1}$ on the Algebraic Degree of $G \circ F$

Boura

Canteaut

2013

IEEE Trans. Inform. Theory

View full text Add to dashboard Cite

We present a study on the algebraic degree of iterated permutations seen as multivariate polynomials. The main result shows that this degree depends on the algebraic degree of the inverse of the permutation which is iterated. This result is also extended to noninjective balanced vectorial functions where the relevant quantity is the minimal degree of the inverse of a permutation expanding the function. This property has consequences in symmetric cryptography since several attacks or distinguishers exploit a low algebraic degree, like higher order differential attacks, cube attacks, and cube testers, or algebraic attacks. Here, we present some applications of this improved bound to a higher degree variant of the block cipher , to the block cipher Rijndael-256 and to the inner permutations of the hash functions ECHO and JH.Index Terms-Algebraic degree, block ciphers, hash functions, higher order differential attacks.

show abstract

“…This construction, a.k.a CRADIC [31], has been proposed by Nyberg and Knudsen in [9]. It is a six-round Feistel cipher over with a 198-bit secret key.…”

Section: A Attacking the -Cipher And Its Variantmentioning

confidence: 98%

On the Influence of the Algebraic Degree of $F^{-1}$ on the Algebraic Degree of $G \circ F$

Boura

Canteaut

2013

IEEE Trans. Inform. Theory

View full text Add to dashboard Cite

show abstract

“…The first cipher, a Feistel structure, that allowed similarly strong arguments against differential attacks was presented by Nyberg and Knudsen [45], see also [44] for a nice survey on the topic. This cipher was named CRADIC, as Cipher Resistant Against DIfferential Cryptanalysis but is often simply referenced as the KN cipher.…”

Section: Related Workmentioning

confidence: 99%

bison Instantiating the Whitened Swap-Or-Not Construction

Canteaut

Lallemand

Leander

et al. 2019

Advances in Cryptology – EUROCRYPT 2019

View full text Add to dashboard Cite

show abstract

“…With respect to differential and linear cryptanalyses, the practical security of Feistel ciphers [4][5][6][7][8], unbalanced Feistel ciphers, such as CAST256-like ciphers [9][10][11], and SPN ciphers [12][13][14] have been studied. Knudsen [4] showed the lower bound of the number of active Ffunctions (s-boxes) for Feistel cipher when round keys are independent and F-function is bijective.…”

Section: Introductionmentioning

confidence: 99%

Practical Security against Differential and Linear Cryptanalysis for SMS4-like Cipher

Qiu-yan¹,

Zhang²,

Jin³

2013

JNW

View full text Add to dashboard Cite

SMS4, a block cipher which employs a special kind of unbalanced Feistel structure, has been accepted as the Chinese National Standard for securing Wireless LANs. This paper investigates the upper bounds of the maximum differential and linear characteristic probabilities of SMS4-like cipher, in order to evaluate the practical security against differential and linear cryptanalysis. In the same way as for SPN ciphers, if F-function is bijective, we give a simple formula to calculate the minimum number of active F-functions (s-boxes) with regard to the number of rounds and the number of input words in each round. This result provides a convenient tool for the practical security threshold analysis of the SMS4-like cipher against differential and linear attacks

show abstract

“Provable” Security against Differential and Linear Cryptanalysis

Abstract: In this invited talk, a brief survey on the developments of countermeasures against differential and linear cryptanalysis methods is presented.

Cited by 4 publications

References 29 publications

On the Influence of the Algebraic Degree of $F^{-1}$ on the Algebraic Degree of $G \circ F$

On the Influence of the Algebraic Degree of $F^{-1}$ on the Algebraic Degree of $G \circ F$

bison Instantiating the Whitened Swap-Or-Not Construction

Practical Security against Differential and Linear Cryptanalysis for SMS4-like Cipher

Contact Info

Product

Resources

About