LowMC实例的差分枚举攻击效果分析

doi:10.11959/j.issn.2096-109x.2021046

Chinese Journal of Network and Information Security ›› 2021, Vol. 7 ›› Issue (3): 149-155.doi: 10.11959/j.issn.2096-109x.2021046

• Papers • Previous Articles Next Articles

Effect of the difference enumeration attack on LowMC instances

Xinxin GE¹^,², Zhihu LI³, Meiqin WANG¹^,², Kai HU¹^,²

¹ School of Cyber Science and Technology, Shandong University, Qingdao 266237, China
² Key Laboratory of Cryptologic Technology and Information Security, Ministry of Education, Shandong University, Qingdao 266237, China
³ China Electric Power Research Institute, Beijing 100192, China

Revised:2021-03-15 Online:2021-06-15 Published:2021-06-01
Supported by:
The National Natural Science Foundation of China(62002201);The National Natural Science Foundation of China(62032014);The National Key R＆D Pro-gram of China(2018YFA0704702);The Major Scientific and Technological Innovation Project of Shandong Province(2019JZZY010133);The Major Basic Research Project of Natural Science Foundation of Shandong Province(ZR202010220025)

Abstract

Abstract:

The LowMC is an algorithm with low multiplicative complexities.For the parameter with limited data complexities and low number of S-boxes, the difference enumeration attack was proposed, which could theoretically attack all rounds of the LowMC.Considering that the original attack is based on the random linear layer,the strength of LowMC algorithm against differential enumeration attacks under a specific linear layer deserves more study.The difference enumeration attack cannot reach theoretical rounds through the research on the so-called key initial round.In terms of some LowMC instances, the key initial round is smaller than the theoretical value, which leads to the failure of the difference enumeration attack.Since the number of rounds of the LowMC is completely based on existing attacks, the analysis is of great significance to the rounds design of the LowMC.

Key words: block cipher, LowMC algorithm, difference enumeration attack, key initial round

CLC Number:

TN918.1

Xinxin GE, Zhihu LI, Meiqin WANG, Kai HU. Effect of the difference enumeration attack on LowMC instances[J]. Chinese Journal of Network and Information Security, 2021, 7(3): 149-155.

Figures/Tables 5

References 16

[1]	ALBRECHT M R , RECHBERGER C , SCHNEIDER T ,et al. Ciphers for MPC and FHE[C]// EUROCRYPT. 2015: 430-454.
[2]	DINUR I , LIU Y W , MEIER W ,et al. Optimized interpolation attacks on LowMC[C]// ASIACRYPT. 2015: 535-560.
[3]	DOBRAUNIG C , EICHLSEDER M , MENDEL F . Higher-order cryptanalysis of LowMC[C]// ICISC. 2015: 87-101.
[4]	CHASE M , DERLER D , GOLDFEDER S ,et al. Post-quantum zero-knowledge and signatures from symmetric-key primitives[C]// ACM Conference on Computer and Communications Security. 2017.
[5]	RECHBERGER C , SOLEIMANY H , TIESSEN T . Cryptanalysis of low-data instances of full LowMCv2[C]// IACR Trans Symmetric Cryptol. 2018: 163-181.
[6]	DEMIRCI H , SEL?UK A A . A meet-in-the-middle attack on 8-round AES[C]// FSE. 2008: 116-126.
[7]	DUNKELMAN O , KELLER N , SHAMIR A . Improved single-key attacks on 8-round AES-192 and AES-256[C]// ASIACRYPT. 2010: 158-176.
[8]	陈少真, 鲁林真 . 对8轮ARIA算法的差分枚举攻击[J]. 电子与信息学报, 2011,33(7): 1770-1774.
	CHEN S Z , LU L Z . Differential enumeration attack on ARIA[J]. Journal of Electronics and Information Technology, 2011,33(7): 1770-1774.
[9]	崔竞一 . 基于中间相遇思想的攻击方法研究[D]. 郑州:信息工程大学, 2017.
	CUI J Y . Research on cryptanalysis based on meet-in-the-middle[D]. Zhengzhou:Information Engineering University, 2017.
[10]	王萼芳, 石明生 . 高等代数(第三版)[M]. 北京: 高等教育出版社, 2003.
	WANG E F , SHI M S . Advanced algebra (third edition)[M]. Beijing: Higher Education Press, 2003.
[11]	HELL M , OHANSSON T , MAXIMOV A ,et al. The grain family of stream ciphers[J]. The eSTREAM Finalists, 2008: 179-190.
[12]	MEIER W , STAFFELBACH O . The self-shrinking generaTor[C]// EUROCRYPT. 1994: 205-214.
[13]	DINUR I , KALES D , PROMITZER A ,et al. Linear equivalence of block ciphers with partial non-linear layers:application to LowMC[C]// EUROCRYPT. 2019: 343-372.
[14]	TIESSEN T , . Polytopic cryptanalysis[C]// EUROCRYPT. 2016: 214-239.
[15]	NYBERG K , . Differentially uniform mappings for cryptography[C]// EUROCRYPT. 1993: 55-64
[16]	李鹏飞 . 基于密码结构的扩散层构造[J]. 网络与信息安全学报, 2017,3(6): 65-76.
	LI P F . Construction of diffusion layers based on cipher structures[J]. Chinese Journal of Network and Information Security, 2017,3(6): 65-76.

Metrics

Recommended 0

No Suggested Reading articles found!

矩阵组数	满足理论关键起始轮数的差分路线数量	满足理论关键起始轮数的矩阵所占比例
20 000	3条	76.75%
20 000	7条	22.08%
20 000	15条及以上	1.17%
注1：线性矩阵由random_device库生成，分组长度为128 bit，每轮1个S盒，差分维度为4，理论关键起始轮数为42轮。

矩阵组数	实际可攻击轮数	所占比例
3 000	41轮	75.9%
3 000	42轮	24.03%
3 000	43轮	0.07%

数据量	密钥长度/bit	LowMCv2轮数	差分枚举理论可攻击轮数	差分枚举实际可攻击轮数
2⁴	168，169	158	158	157
2⁵	168，169	158	158	157
2⁶	168，169	158	158	157
2⁷	168，169	158	158	157
2¹²	179	166	166	165
2¹³	179，180，181	166	166	165
2¹⁴	179，180，181	166	166	165
2¹⁵	179，180	166	166	165
注2：线性矩阵由Grain算法的LFSR生成，分组长度为128 bit，1个S盒，差分维度为4。

Effect of the difference enumeration attack on LowMC instances

RichHTML

PDF下载

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 5

References 16

Related Articles 6

Metrics

Recommended 0

[1]	Ruiqi XIA, Manman LI, Shaozhen CHEN. Identification on the structures of block ciphers using machine learning [J]. Chinese Journal of Network and Information Security, 2023, 9(3): 79-89.
[2]	Zhengbin LIU. Differential-linear cryptanalysis of PRINCE cipher [J]. Chinese Journal of Network and Information Security, 2021, 7(4): 131-140.
[3]	Weijian CHEN, Haoxiang LUO. Differential fault attack on LiCi cipher [J]. Chinese Journal of Network and Information Security, 2021, 7(2): 104-109.
[4]	Peng-fei LI. Construction of diffusion layers based on cipher structures [J]. Chinese Journal of Network and Information Security, 2017, 3(6): 65-76.
[5]	Peng-fei LI,Yong-qiang LI. Construction of MDS matrices [J]. Chinese Journal of Network and Information Security, 2016, 2(6): 44-53.
[6]	Zheng-bin LIU. Automatic search algorithm for differential characteristics in ARX ciphers [J]. Chinese Journal of Network and Information Security, 2016, 2(5): 56-63.