PRINCE密码算法的差分-线性分析

doi:10.11959/j.issn.2096-109x.2021072

Abstract

Abstract:

PRINCE is a low-latency lightweight block cipher, which is widely used in a lot of resource constrained devices.It is based on the FX construction and the core component is PRINCE_core.Differential-linear cryptanalysis is a classical cryptographic technique, which combines differential cryptanalysis and linear cryptanalysis together.Short differential characteristics and linear characteristics with high-probability were concatenated to break the cipher.Differential-linear cryptanalysis were applied to attack PRINCE_core.Using 2-round differential-linear distinguisher, 4-round PRINCE_corecan be broken with 2⁶chosen plaintext and 2^14.58encryption.For 6-round and 7-round PRINCE_core, the data complexity is 2^12.84and 2^29.02respectively, and the time complexity is 2^25.58and 2^41.53.

Key words: lightweight block cipher, PRINCE, differential-linear cryptanalysis

CLC Number:

TP393

Zhengbin LIU. Differential-linear cryptanalysis of PRINCE cipher[J]. Chinese Journal of Network and Information Security, 2021, 7(4): 131-140.

Figures/Tables 8

References 24

[1]	BORGHO J , CANTEAUT A , GüNEYSU T ,, et al . PRINCE:a low-latency block cipher for pervasive computing applications[C]// ASIACRYPT 2012. 2012: 208-225.
[2]	KILIAN J , ROGAWAY P . How to protect DES against exhaustive key search (an analysis of DESX)[J]. Journal of Cryptology, 2021,14(1): 17-35.
[3]	JEAN J , NIKOLIC I , PEYRIN T ,et al. Security analysis of PRINCE[C]// International Workshop on Fast Software Encryption (FSE) 2013. 2013: 92-111.
[4]	SOLEIMANY H , BLONDEAU C , YU X L ,et al. Refection cryptanalysis of PRINCE-like ciphers[C]// International Workshop on Fast Software Encryption (FSE) 2013. 2013: 71-91.
[5]	CANTEAUT A , NAYA-PLASENCIA M ,, VAYSSIERE B . Sieve-inthe-middle improved MITM attacks[C]// Advances in Cryptology CRYPTO. 2013: 222-240.
[6]	CANTEAUT A , FUHR T , GILBERT H ,et al. Multiple differential cryptanalysis of round-reduced PRINCE[C]// International Workshop on Fast Software Encryption (FSE). 2014: 591-610.
[7]	DERBEZ P , PERRIN L . Meet-in-the-middle attacks and structural analysis of round-reduced PRINCE[C]// International Workshop on Fast Software Encryption(FSE). 2014: 190-216.
[8]	THE PRINCE TEAM.. PRINCE challenge[R].
[9]	段春晖, 谭林, 戚文峰 . 减轮 PRINCE 的混合差分分析[J]. 信息工程大学学报, 2019,20(6): 695-701.
	DUAN C H , TAN L , QI W F . Mixture differential cryptanalysis on round-reduced PRINCE[J]. Journal of Information Engineering University, 2019,20(6): 695-701.
[10]	ABED F , LIST E , LUCKS S . On the security of the core of prince against Biclique and differential cryptanalysis[R]. 2012.
[11]	ZHAO G Y , SUN B , LI C ,et al. Truncated differential cryptanalysis of PRINCE[J]. Security and Communication Networks, 2015(8): 2875-2887.
[12]	LI L B , JIA K T , WANG X Y . Improved meet-in-the-middle attacks on AES-192 and PRINCE[R].
[13]	魏悦川, 潘晓中, 戎宜生 ,等. 对 PRINCE分组密码的不可能差分攻击[J]. 西安电子科技大学学报, 2017,44(1): 119-124.
	WEI Y C , PAN X Z , RONG Y S ,et al. Impossible differential cryptanalysis on the PRINCE[J]. Journal of Xidian University, 2017,44(1): 119-124.
[14]	袁征, 彭真 . 轻量级分组密码 PRINCE 算法的 Biclique 分析[J]. 密码学报, 2017,4(6): 517-527.
	YUAN Z , PENG Z . Biclique cryptanalysis of lightweight block cipher PRINCE[J]. Journal of Cryptologic Research, 2017,4(6): 517-527.
[15]	BIHAM E , SHAMIR A . Differential cryptanalysis of DES-like cryptosystems[J]. Journal of Cryptology, 1991,4(1): 3-72.
[16]	MATSUI M , . Linear cryptanalystis method for DES cipher[C]// Advances in Cryptology-Proceedings of EUROCRYPT '93. 1993: 386-397.
[17]	LANGFORD S K , HELLMAN M E . Differential-linear Cryptanalysis[C]// Advances in Cryptology-proceedings of CRYPTO '94. 1994: 17-25.
[18]	BIHAM E , DUNKELMAN O , KELLER N . Enhancing differential-linear cryptanalysis[C]// Advances in Cryptology-proceedings of ASIACRYPT 2002. 2002: 254-266.
[19]	LIU Z Q , GU D W , ZHANG J ,et al. Differential-multiple linear cryptanalysis[C]// Proceedings of Information Security and Cryptology (Inscrypt 2009). 2009: 35-49.
[20]	LU J Q . A methodology for differential-linear cryptanalysis and its applications[J]. Des Codes Cryptography, 2015,77(1): 11-48.
[21]	BLONDEAU C , LEANDER G , NYBERG K . Differential-linear cryptanalysis revisited[J]. Journal of Cryptology, 2017,30(3): 859-888.
[22]	CHABAUD F , VAUDENAY S . Links between differential and linear cryptanalysis[C]// Advances in Cryptology-Proceedings of EUROCRYPT '94, 1994: 356-365.
[23]	BLONDEAU C , NYBERG K . New links between differential and linear cryptanalysis[C]// Advances in Cryptology-Proceedings of EUROCRYPT 2013. 2013: 388-404.
[24]	BAR-ON A , DUNKELMAN O , KELLER N ,et al. DLCT:a new tool for differential-linear cryptanalysis[C]// EUROCRYPT 2019. 2019: 313-342.

Metrics

Recommended 0

No Suggested Reading articles found!

攻击轮数	攻击类型	数据复杂度	时间复杂度	存储复杂度	参考文献
4	积分分析	2⁴	2⁸	2⁴	文献[3]
4	差分-线性分析	2⁶	2^14.58	2¹²	本文
5	混合差分分析	2¹⁴	2^23.68	2⁸	文献[9]
6	积分分析	2¹⁶	2³⁰	2¹⁶	文献[3]
6	差分分析	2⁴⁸	2^56.26	2⁴⁸	文献[10]
6	差分-线性分析	2^12.84	2^25.58	2¹⁶	本文
7	截断差分分析	2⁵⁰	2^48.2	2^22.6	文献[11]
7	差分-线性分析	2^29.02	2^41.53	2¹⁶	本文
8	中间相遇攻击	2⁵³	2⁵³	2²⁸	文献[12]
9	不可能差分分析	2^61.2	2^54.3	2^17.7	文献[13]
12	Biclique攻击	2³²	2^62.69	2⁸	文献[14]

	0	1	2	3	4	5	6	7	8	9	10	11	12	13	14	15
0	1	0	0	0	0	0	0	0	0	0	0	0	0	0	0	0
1	0	2^-2	0	0	2^-3	0	2^-3	0	2^-2	2^-3	0	2^-3	0	0	0	0
2	0	2^-3	0	2^-2	0	0	0	2^-3	2^-3	0	0	0	0	2^-2	2^-3	0
3	0	0	0	0	0	2^-3	2^-3	0	2^-3	2^-3	2^-3	2^-3	2^-3	0	0	2^-3
4	0	2^-3	2^-3	2^-2	2^-3	2^-3	0	0	2^-3	0	2^-3	0	0	0	0	0
5	0	0	2^-3	2^-3	0	2^-3	0	2^-3	0	2^-3	0	2^-3	2^-3	2^-3	0	0
6	0	0	2^-3	2^-3	0	2^-3	2^-3	0	0	2^-3	0	2^-3	0	0	2^-2	0
7	0	0	2^-3	0	0	0	2^-3	0	2^-3	0	2^-2	0	0	2^-3	2^-3	2^-3
8	0	0	2^-3	0	2^-2	2^-3	0	0	2^-3	2^-3	0	2^-3	0	2^-3	0	0
9	0	0	2^-3	2^-3	0	0	0	0	0	2^-3	2^-3	0	2^-2	2^-3	0	2^-3
10	0	0	0	2^-3	2^-3	2^-2	0	2^-2	2^-3	0	0	0	0	0	0	2^-3
11	0	2^-3	0	0	2^-2	0	0	2^-3	0	0	0	2^-3	2^-3	0	2^-3	2^-3
12	0	2^-2	0	0	0	2^-3	2^-3	0	0	0	2^-3	2^-3	2^-3	0	2^-3	0
13	0	2^-3	0	0	0	0	0	2^-3	0	2^-2	2^-3	0	0	2^-3	2^-3	2^-3
14	0	0	2^-3	0	0	0	2^-2	2^-3	0	0	0	2^-3	2^-3	2^-3	0	2^-3
15	0	0	2^-3	0	2^-3	0	2^-3	2^-3	0	0	2^-3	0	2^-3	0	2^-3	2^-3

	0	1	2	3	4	5	6	7	8	9	10	11	1213	14	15
0	2^-1	0	0	0	0	0	0	0	0	0	0	0	00	0	0
1	0	0	-2^-3	-2^-3	2^-3	-2^-3	0	2^-2	-2^-2	0	-2^-3	2^-3	-2^-3-2^-3	0	0
2	0	0	-2^-2	0	-2^-2	0	0	0	-2^-3	-2^-3	2^-3	-2^-3	-2^-32^-3	2^-3	2^-3
3	0	2^-2	-2^-3	-2^-3	2^-3	-2^-3	0	0	2^-3	2^-3	2^-2	0	00	2^-3	-2^-3
4	0	0	-2^-2	2^-2	2^-3	2^-3	2^-3	2^-3	2^-3	2^-3	-2^-3	-2^-3	00	0	0
5	0	0	2^-3	2^-3	0	-2^-2	-2^-3	2^-3	2^-3	-2^-3	0	-2^-2	-2^-3-2^-3	0	0
6	0	-2^-2	0	0	-2^-3	-2^-3	2^-3	-2^-3	0	2^-2	0	0	-2^-3-2^-3	2^-3	-2^-3
7	0	0	2^-3	-2^-3	0	0	-2^-3	2^-3	0	2^-2	-2^-3	-2^-3	02^-2	2^-3	2^-3
8	0	-2^-3	-2^-3	0	2^-2	-2^-3	-2^-3	-2^-2	-2^-3	0	0	-2^-3	2^-30	0	2^-3
9	0	-2^-3	0	2^-3	2^-3	0	-2^-3	0	2^-3	0	2^-3	2^-2	-2^-22^-3	0	2^-3
10	0	2^-3	2^-3	2^-2	0	2^-3	-2^-3	0	-2^-2	2^-3	2^-3	0	0-2^-3	2^-3	0
11	0	-2^-3	0	-2^-3	2^-3	2^-2	-2^-3	0	0	-2^-3	0	-2^-3	-2^-30	2^-3	-2^-2
12	0	-2^-3	-2^-3	0	-2^-3	0	-2^-2	2^-3	0	2^-3	2^-3	0	2^-30	-2^-2	-2^-3
13	0	-2^-3	0	2^-3	0	-2^-3	0	2^-3	0	-2^-3	0	2^-3	2^-22^-3	2^-2	-2^-3
14	0	-2^-3	2^-3	0	2^-3	0	2^-2	2^-3	-2^-3	0	2^-2	-2^-3	02^-3	-2^-3	0
15	0	2^-3	0	2^-3	0	-2^-3	0	-2^-3	-2^-3	0	-2^-3	0	-2^-32^-2	-2^-3	-2^-2

Differential-linear cryptanalysis of PRINCE cipher

RichHTML

PDF下载

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 8

References 24

Related Articles 1

Metrics

Recommended 0

x	0	1	2	3	4	5	6	7	8	9	10	11	12	13	14	15
S(x)	B	F	3	2	A	C	9	1	6	7	8	0	E	5	D	4