Camellia是NESSIE计划2003年公布的分组密码标准算法之一.本文对Camellia的差分迭代特征和线性迭代特征进行分析,发现了P置换及其逆置换对3轮和4轮迭代特征的影响,找到了到目前为止最优的3轮和4轮差分和线性迭代特征,并利用4轮最优差分和线性迭代特征,给出了r(6≤r≤18)轮Camellia变体的差分特征概率和线性偏差概率,其中18轮的差分特征概率为2^-296,线性偏差概率为2^-141.32,这些结果优于Eli Biham等人2001所得的结果.

Camellia is one of standard block ciphers algorithms published in 2003 by the NESSIE project.We analyze differential iterative characteristics and linear iterative characteristics,and find how the permutation and its inverse permutation affect 3-round and 4-round iterative characteristics,and the best 3-round and 4-round differential and linear iterative characteristics are found by us.Usingthe best 4-round iterative characteristics,we construct r-round differential and linear characteristics of Camellia variant.The differential probability of the 18th round is 2^-296,and the linear bias is 2^-141.32.These results are better than the results given by Eli Biham in 2001.