基于密文随机性度量值分布特征的分组密码算法识别方案

doi:10.11959/j.issn.1000-436x.2015107

摘要/Abstract

摘要：

在研究现有加密算法识别方案局限性的基础上，提出了基于密文随机性度量值分布特征的分组密码算法识别方案。首先，基于码元频数检测、块内频数检测及游程检测对AES、Camellia、DES、3DES及SMS4密文的随机性度量值取值个数进行了统计分析，采用k-means算法对其进行了初始聚类划分。其次，针对相同聚类中的分组密码算法识别问题，基于降低特征向量间相似度的原则，求解了码元频数检测、块内频数检测及游程检测对应的密文随机性度量值特征向量维数。最后，对AES、Camellia、DES、3DES及SMS4算法的实验结果表明，提出方案在已知密文条件下，实现了对以上典型分组密码算法的识别，相关成果可为进一步探索基于密文随机性度量值分布特征的加密算法识别提供参考。

关键词: 随机性度量, 密文随机性, 加密算法识别, 游程检测, 特征向量

Abstract:

By researching deficiency of current encryption algorithms identification schemes，a block ciphers identification scheme is proposed based on the distribution character of randomness test values for ciphertext.Firstly，the numbers of randomness test values for AES，Camellia，DES，3DES，SMS4 are respectively calculated based on the frequency test，frequency test in block，run test and originally clustered by the k-means algorithm.Secondly，in order to identify the block ciphers in each clustering，the dimensions of eigenvectors to the frequency test，frequency test in block，run test are calculated on the principle of reducing the comparability between eigenvectors.Eventually，the experimental results of AES，Camellia，DES，3DES，SMS4 demonstrate that the proposed scheme effectively identified the above representative block ciphers，and the correlative research can promote the further encryption algorithms identification research.

吴杨,王韬,邢萌,李进东. 基于密文随机性度量值分布特征的分组密码算法识别方案[J]. 通信学报, 2015, 36(4): 147-155.

Yang WU,Tao WANG,Meng XING,Jin-dong LI. Block ciphers identification scheme based on the distribution character of randomness test values of ciphertext[J]. Journal on Communications, 2015, 36(4): 147-155.

图/表 10

图1

图2

图3

表1

表2

表3

图4

图5

图6

图7

参考文献 19

[1]	SPILLMAN R ， JANSSEN M ， NELSON B ，et al. Use of a genetic algorithm in the cryptanalysis of simple substitution ciphers[J]. Cryptologia， 1993，17(1): 31-44.
[2]	RAMZAN Z . On Using Neural Networks to Break Cryptosystems[R]. Laboratory of Computer Science，Massachusetts Institute of Technology，Cambridge，MA 02139， 1998.
[3]	DILEEP A D ， SEKHAR C C . Identification of block ciphers using support vector machines[A]. Proceeding of the 2006 International Joint Conference on Neural Networks[C]. Vancouver，Canada， 2006. 2696-2701.
[4]	MELTEM S T，?A?DA? ? ， NURDAN B S ， et al . New distinguishers based on random mappings against stream ciphers[A]. Proceeding of the 5th International Conference Lexington[C]. KY，USA， 2008. 30-41.
[5]	陈华，冯登国，范丽敏 . 一种关于分组密码的新的统计检测方法[J]. 计算机学报， 2009，32(4): 595-601. CHEN H ， FENG D G ， FAN L M . A new statistical test on block ciphers[J]. Chinese Journal of Computers， 2009，32(4): 595-601.
[6]	LIU T M ， JIANG L H ， HE H Q ，et al. Researching on cryptographic algorithm recognition based on static characteristic-code[A]. Proceeding of the Future Generation Information Technology Conference[C]. Jeju Island，Korea， 2009. 140-147.
[7]	MANJULA R ， ANTITHA R . Identification of encryption algorithm using decision tree[A]. Proceeding of the First International Conference on Computer Science and Information Technology[C]. Bangalore，India， 2011. 237-246.
[8]	GR?BERT F ， WILLEMS C ， HOLZ T . Automated identification of cryptographic primitives in binary programs[A]. Proceeding of the 14th International Symposium[C]. Menlo Park，CA，USA， 2011. 41-60.
[9]	谷利泽，郑世慧，杨义先 . 现代密码学教程[M]. 北京: 北京邮电大学出版社， 2009. GU L Z ， ZHENG S H ， YANG Y X . Tutorial of the Modern Cryptography[M]. Beijing: Beijing University of Posts and Telecommunications PressPress， 2009.
[10]	RIVAIN M . Differential fault analysis on DES middle rounds[A]. Proceeding of the 11th International Workshop Lausanne[C]. Switzerland， 2009. 457-469.
[11]	SAHA D ， MUKHOPADHYAY D ， ROY C D . A diagonal fault attack on the advanced encryption standard[EB/OL]. ， 2009.
[12]	赵新杰，王韬，郭世泽 . 一种针对Camellia的改进差分故障分析[J]. 计算机学报， 2011，34(4): 613-627. ZHAO X J ， WANG T ， GUO S Z . An improved differential fault analysis on camellia[J]. Chinese Journal of Computers， 2011，34(4): 613-627.
[13]	赵新杰，王韬，郑媛媛 . 针对SMS4密码算法的Cache计时攻击[J]. 通信学报， 2010，31(6): 89-98. ZHAO X J ， WANG T ， ZHENG Y Y . Cache timing attack on SMS4[J]. Journal on Communications， 2010，31(6): 89-98.
[14]	胡磊，王鹏等 . 应用密码学手册[M]. 北京: 电子工业出版社， 2005. HU L ， WANG P ， et al . Handbook of Applied Cryptography[M]. Beijing: Publishing House of Electronics IndustryPress， 2005.
[15]	RUKHIN A ， SOTO J ， NECHVATAL J . A Statistical Test Suite for Random and Pseudorandom Number Generators for Cryptographic Applications[R]. SP 800-22， 2001.
[16]	FILIOL E . A new statistical testing for symmetric ciphers and hash functions[A]. Proceeding of Information and Communications Security:4th International Conference[C]. Singapore， 2002. 342-353.
[17]	胡俭勇，苏锦海 . 一种随机性实时检测方案[J]. 计算机工程， 2009，35(9): 136-138. HU J Y ， SU J H . Scheme for real time test of randomness[J]. Computer Engineering， 2009，35(9): 136-138.
[18]	FIPS PUB 140-2-2001 Security Requirements for Cryptographic Modules[S]. Washington，USA:National Institute of Standards and Technology， 2001.
[19]	Special Publication 800-22 Revision 1a[S]. Washington，USA:National Institute of Standards and Technology， 2010.

	AES	Camellia	DES	3DES
AES	0.999 990 01	0.999 958 79	—	—
Camellia	0.999 958 79	0.999 986 90	—	—
DES	—	—	0.999 992 012	0.999 9658 89
3DES	—	—	0.999965889	0.999992148

	AES	Camellia	DES	3DES
AES	0.999 932 70	0.999 697 43	—	—
Camellia	0.999 697 43	0.999 928 46	—	—
DES	—	—	0.999 913 93	0.999 735 67
3DES	—	—	0.999 735 67	0.999 930 15

	AES	Camellia	DES	3DES
AES	0.999 430 75	0.997 735 57	—	—
Camellia	0.997 735 57	0.999 452 85	—	—
DES	—	—	0.999 550 09	0.998 109 93
3DES	—	—	0.998 109 93	0.999 551 59