• 中国计算机学会会刊
  • 中国科技核心期刊
  • 中文核心期刊

计算机工程与科学

• 计算机网络与信息安全 • 上一篇    下一篇

ESF算法的相关密钥不可能差分分析

谢敏,杨盼   

  1. (西安电子科技大学综合业务网理论及关键技术国家重点实验室,陕西 西安 710071)
  • 收稿日期:2017-05-05 修回日期:2017-06-28 出版日期:2018-07-25 发布日期:2018-07-25
  • 基金资助:

    国家自然科学基金(61373170,U0835004,U1536202);国家111创新引智基地资助项目(B08038)

Related-key impossible differential cryptanalysis on ESF

XIE Min,YANG Pan   

  1. (State Key Laboratory of Integrated Service Networks,Xidian University,Xi’an 710071,China)
  • Received:2017-05-05 Revised:2017-06-28 Online:2018-07-25 Published:2018-07-25

摘要:

ESF算法是一种具有广义Feistel结构的32轮迭代型轻量级分组密码。为研究ESF算法抵抗不可能差分攻击的能力,首次对ESF算法进行相关密钥不可能差分分析,结合密钥扩展算法的特点和轮函数本身的结构,构造了两条10轮相关密钥不可能差分路径。将一条10轮的相关密钥不可能差分路径向前向后分别扩展1轮和2轮,分析了13轮ESF算法,数据复杂度是260次选择明文对,计算量是223次13轮加密,可恢复18 bit密钥。将另一条10轮的相关密钥不可能差分路径向前向后都扩展2轮,分析了14轮ESF算法,数据复杂度是262选择明文对,计算复杂度是243.95次14轮加密,可恢复37 bit密钥。
 

关键词: ESF算法, 轻量级密码算法, 相关密钥不可能差分分析攻击

Abstract:

ESF is a lightweight block cipher based on a modified 32round Feistel structure. In order to study the ESF algorithm's ability to resist the impossible differential attack, we use relatedkey impossible differential cryptanalysis to analyze the security of ESF for the first time. And two 10round relatedkey impossible differential paths are constructed based on the characteristics of the key extended algorithm and the structure of round functions. Then a relatedkey impossible differential attack on 13round ESF is proposed by adding 1 round at the top and 2 rounds at the bottom to a 10round relatedkey impossible differential path. The attack has a complexity of 223 13round encryptions and about 260 chosen plaintexts with 18 recovered keybits. A relatedkey impossible differential attack on a 14round ESF is also proposed by adding 2 rounds both at the top and the bottom to another 10round relatedkey impossible differential path, which has a complexity of 243.95 14round encryptions and about 262 chosen plaintexts with 37 recovered keybits.
 

Key words: ESF algorithm, light weight cipher algorithm, related-key impossible differential attack