减轮LEA密码算法的积分攻击

doi:10.3969/j.issn.0372-2112.2020.01.003

电子学报 ›› 2020, Vol. 48 ›› Issue (1): 17-27.DOI: 10.3969/j.issn.0372-2112.2020.01.003

减轮LEA密码算法的积分攻击

李航^1,2, 任炯炯^1,2, 陈少真^1,2

1. 战略支援部队信息工程大学, 河南郑州 450001;
2. 数学工程与先进计算国家重点实验室, 河南郑州 450001

收稿日期:2018-11-05 修回日期:2019-04-22 出版日期:2020-01-25
- 作者简介:
- 李航男,1995年3月出生,山东菏泽人.现为战略支援部队信息工程大学硕士研究生,主要研究方向为密码学与信息安全.E-mail:lih_student@163.com;任炯炯 男,1995年1月出生,甘肃天水人.现为战略支援部队信息工程大学博士研究生,主要研究方向为密码学与信息安全;陈少真 女,1967年3月出生,河南郑州人.战略支援部队信息工程大学教授,主要研究方向为密码学与信息安全.
- 基金资助:
- 数学工程与先进计算国家重点实验室开放基金课题 (No.2018A03）; 国家密码发展基金 (No.MMJJ20180203）; 信息保障技术重点实验室开放基金课题 (No.KJ-17-002）

Integral Attack on Reduced-Round LEA Cipher

LI Hang^1,2, REN Jiong-jiong^1,2, CHEN Shao-zhen^1,2

1. Information Engineering University, Zhengzhou, Henan 450001, China;
2. State Key Laboratory of Mathematical Engineering and Advanced Computing, Zhengzhou, Henan 450001, China

Received:2018-11-05 Revised:2019-04-22 Online:2020-01-25 Published:2020-01-25

摘要/Abstract

摘要： LEA密码算法是一类ARX型轻量级分组密码，广泛适用于资源严格受限的环境.本文使用中间相错技术找到LEA算法的86条8轮和6条9轮零相关区分器，进一步利用零相关区分器和积分区分器的关系，构造出5条8轮和1条9轮积分区分器.在8轮积分区分器的基础上，利用密钥扩展算法的性质和部分和技术，首次实现了对LEA-128的10轮积分攻击，攻击的计算复杂度为2¹²⁰次10轮LEA-128加密.进一步，实现了对LEA-192的11轮积分攻击以及对LEA-256的11轮积分攻击，计算复杂度分别为2^185.02次11轮LEA-192加密和2²⁴⁸次11轮LEA-256加密.

关键词: 轻量级分组密码, LEA算法, 零相关区分器, 积分攻击

Abstract: LEA cipher,a family of ARX lightweight block cipher,is widely used in resource-constrained environments.In this paper,we use the miss-in-the-middle technique to find 86 8-round zero-correlation distinguishers and 6 9-round zero-correlation distinguishers of LEA,and make use of the relationship between the zero-correlation distinguisher and the integral distinguisher to construct 5 8-round distinguishers and 1 9-round integral distinguishers.Based on 8-round integral distinguisher,integral attack on 10-round LEA-128 is implemented firstly by using the property of the key schedule and partial-sum technology,and the attack performs 2¹²⁰ 10-round LEA-128 encryptions.Besides,the integral attack against 11-round LEA-192 with computational complexity of 2^185.02 11-round LEA-192 encryptions and the integral attack against 11-round LEA-256 with computational complexity of 2²⁴⁸ 11-round LEA-256 encryptions are implemented.

Key words: lightweight block cipher, LEA, zero-correlation distinguisher, integral attack

中图分类号:

TN918.1

李航, 任炯炯, 陈少真. 减轮LEA密码算法的积分攻击[J]. 电子学报, 2020, 48(1): 17-27.

LI Hang, REN Jiong-jiong, CHEN Shao-zhen. Integral Attack on Reduced-Round LEA Cipher[J]. Acta Electronica Sinica, 2020, 48(1): 17-27.

参考文献

[1] DEUKJO Hong,et al.LEA:A 128-bit block cipher for fast encryption on common processors[A].Proceedings of WISA 2013[C].Cham:Springer,2013.3-27.
[2] ZHANG Kai,et al.Zero correlation linear cryptanalysis on LEA family ciphers[J].Journal of Communications,2016,11(7):677-685.
[3] SONG Ling,et al.Automatic differential analysis of ARX block ciphers with application to SPECK and LEA[A].Proceedings of the 21st Australasian Conference on Information Security and Privacy[C].New York:Springer,2016.379-394.
[4] BOGDANOV A,RIJMEN V.Linear hulls with correlation zero and linear cryptanalysis of block ciphers[J].Designs,Codes and Cryptography,2014,70(3):369-383.
[5] BOGDANOV A,et al.Integral and multidimensional linear distinguishers with correlation zero[A].Proceedings of ASIACRYPT 2012[C].Berlin Heidelberg:Springer,2012.244-261.
[6] 付立仕,等.嵌套SP网络的New-Structure系列结构的零相关线性逼近与不可能差分性质研究[J].电子学报,2017,45(6):1367-1374. FU Li-shi,et al.Zero correlation linear approximations and impossible differentials of new-structure series with SP networks[J].Acta Electronica Sinica,2017,45(6):1367-1374.(in Chinese)
[7] DAEMEN J,KNUDSEN L,RIJMEN V.The block cipher square[A].Proceedings of FSE 1997[C].Berlin Heidelberg:Springer,1997.149-165.
[8] KNUDSEN L,WAGNER D.Integral cryptanalysis[A].Proceedings of FSE 2002[C].Berlin Heidelberg:Springer,2002.112-127.
[9] SUN Bing,et al.Higher order integral cryptanalysis of Zodiac[J].Chinese Journal of Electronics,2013,22(3):589-593.
[10] TODO Y.Integral cryptanalysis on full MISTY1[A].Proceedings of CRYPTO 2015[C].Berlin Heidelberg:Springer,2015.413-432.
[11] TODO Y.Structural evaluation by generalized integral property[A].Proceedings of EUROCRYPT 2015[C].Berlin Heidelberg:Springer,2015.287-314.
[12] TODO Y,MORII M.Bit-based division property and application to Simon family[A].Proceedings of FSE 2016[C].New York:Springer,2016.357-377.
[13] SUN L,et al.Automatic search of bit-based division property for ARX ciphers and word-based division property[A].Proceedings of ASIACRYPT 2017[C].Cham:Springer,2017.128-157.
[14] SUN L,et al.MILP-aided bit-based division property for ARX ciphers[J].Science China Information Sciences,2018,61(11):118102.
[15] Wen L,Wang M.Integral zero-correlation distinguisher for ARX block cipher,with application to SHACAL-2[A].Proceedings of Information Security and Privacy 2014[C].Cham:Springer,2014.454-461.
[16] Ferguson N,et al.Improved cryptanalysis of Rijndael[A].Proceedings of FSE 2000[C].Berlin Heidelberg:Springer,2000.213-230.

减轮LEA密码算法的积分攻击

Integral Attack on Reduced-Round LEA Cipher

PDF

可视化

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 3

编辑推荐

Metrics

[1]	任炯炯, 张仕伟, 李曼曼, 陈少真. 基于SAT的ARX不可能差分和零相关区分器的自动化搜索[J]. 电子学报, 2019, 47(12): 2524-2532.
[2]	彭昌勇, 朱创营, 黄莉, 祝跃飞, 王靳辉. 扩展的代数侧信道攻击及其应用[J]. 电子学报, 2013, 41(5): 859-864.
[3]	魏悦川;孙兵;李超;. 对Rijndael-256算法新的积分攻击[J]. 电子学报, 2011, 39(2): 476-480.