ARIA密码的积分故障分析
沈煜,李玮,谷大武,吴益鑫,曹珊,刘亚,刘志强,周志洪

Integral fault analysis of the ARIA cipher
Yu SHEN,Wei LI,Dawu GU,Yixin WU,Shan CAO,Ya LIU,Zhiqiang LIU,Zhihong ZHOU
表6 在4轮攻击方案中恢复子密钥的准确性和可靠性
集合 准确性 可靠性
G1 G2 G3 G4 G5 G1 G2 G3 G4 G5
1 11.31 11.37 11.34 11.28 11.35 0 0 0 0 0
2 11.13 11.19 11.16 11.10 11.17 0 0 0 0 0
3 10.81 10.86 10.81 10.85 10.87 0 0 0 0 0
4 10.44 10.43 10.38 10.42 10.39 0 0 0 0 0
5 9.95 9.95 9.95 9.89 9.98 0 0 0 0 0
6 9.39 9.42 9.43 9.40 9.40 0 0 0 0 0
7 8.81 8.88 8.81 8.80 8.87 0 0 0 0 0
8 8.23 8.24 8.22 8.15 8.27 0 0 0 0 0
9 7.55 7.55 7.56 7.54 7.51 0 0 0 0 0
10 6.92 6.91 6.89 6.90 6.89 0 0 0 0 0
11 6.25 6.26 6.23 6.24 6.14 0 0 0 0 0
12 5.52 5.57 5.52 5.58 5.45 0 0 0 0 0
13 4.78 4.77 4.77 4.81 4.76 0 0 0 0 0
14 3.94 3.93 3.92 3.95 3.94 0 0 0 0 0
15 2.83 2.82 2.81 2.84 2.83 0 0 0 0 0
16 0 0 0 0 0 100% 100% 100% 100% 100%