• 中国计算机学会会刊
  • 中国科技核心期刊
  • 中文核心期刊

J4 ›› 2015, Vol. 37 ›› Issue (02): 281-287.

• 论文 • 上一篇    下一篇

SHA-3轮函数中χ及θ变换的性质研究

王淦,张文英   

  1. (1.山东师范大学信息科学与工程学院,山东 济南 250014;
    2.山东省分布式计算机软件新技术重点实验室,山东 济南 250014)
  • 收稿日期:2013-11-20 修回日期:2014-02-10 出版日期:2015-02-25 发布日期:2015-02-25
  • 基金资助:

    国家自然科学基金资助项目(61272434);山东省自然科学基金资助项目(ZR2012FM004);信息安全国家重点实验室开放课题资助项目(4050101)

Research on properties of χ and
θ mappings in SHA-3 permutation  

WANG Gan,ZHANG Wenying   

  1. (1.School of Information Science and Engineering,Shandong Normal University,Jinan 250014;
    2.Shandong Provincial Key Laboratory for Novel Distributed Computer Software Technology,Jinan 250014,China)
  • Received:2013-11-20 Revised:2014-02-10 Online:2015-02-25 Published:2015-02-25

摘要:

Keccak自2012被宣布为新Hash函数标准SHA3后受到众多学者的关注,成为当前的研究热点之一。χ及θ 是Keccak轮函数中最重要也是最复杂的两个变换。首先对Keccak轮函数中唯一的非线性变换χ的性质进行分析,将χ表示为布尔函数表达式形式,对χ输入差分的32种情况逐一进行推导,得到32种输出差分的布尔函数表达式,进而构造出χ的输入输出差分分布表,并对其差分分布规律进行了分析。Double Kernel形式的差分保证差分通过θ变换时不被其扩散,针对文献[1]中的低汉明重量Double Kernel形式差分的搜索算法,提出了一种新的搜索算法,新算法的复杂度较之原算法有明显降低。实验和理论推导证明了汉明重量为4及以下的Double Kernel形式差分不存在。

关键词: Hash函数, Keccak, SHA3, 布尔函数表达式, 差分分布, 搜索算法

Abstract:

Keccak has attracted many scientists since  it was announced new standard of Hash function SHA3 last year. θ and χ are the two most important and complex mappings in Keccak permutation. In this paper we first give the boolean function expression of χ, and then make a differential distribution table of χ by computing output differences from 32 input differences. We also make an analysis of the distribution pattern of χ from the distribution table. Double Kernel guarantees that the differences will not be diffused when passing θ mapping. With regard to this, we propose a new Double Kernel search algorithm with lower complexity compared with the algorithm in [1]. In the end, theoretic derivation and experiments prove that the differences with Hamming Weight equal to or less than 4 do not exist.

Key words: Hash function;Keccak;SHA-3;boolean function expression;differential distribution;search algorithm