CIKS-128分组算法的相关密钥-差分攻击

doi:10.3969/j.issn.0372-2112.2016.09.010

电子学报 ›› 2016, Vol. 44 ›› Issue (8): 1837-1844.DOI: 10.3969/j.issn.0372-2112.2016.09.010

CIKS-128分组算法的相关密钥-差分攻击

郭建胜^1,2, 崔竞一¹, 罗伟³, 刘翼鹏¹

1. 解放军信息工程大学, 河南郑州 450004;
2. 信息保障技术重点实验室, 北京 100000;
3. 7817部队, 四川成都 611843

收稿日期:2014-12-24 修回日期:2015-06-24 出版日期:2016-08-25
- 通讯作者:
- 崔竞一
- 作者简介:
- 郭建胜 男,1972年出生,河南沁阳人,博士,解放军信息工程大学教授、博士生导师,主要研究方向为密码学和信息安全.E-mail:tsg_31@126.com
- 基金资助:
- 博士后科学基金 (No.2014M562582）

Related-Key Differential Attack on Block Cipher CIKS-128

GUO Jian-sheng^1,2, CUI Jing-yi¹, LUO Wei³, LIU Yi-peng¹

1. The PLA Information Engineering University, Zhengzhou, Henan 450004, China;
2. Science and Technology on Information Assurance Laboratory, Beijing 100000, China;
3. The Unit of 78179, Chengdu, Sichuan, 611843, China

Received:2014-12-24 Revised:2015-06-24 Online:2016-08-25 Published:2016-08-25
- Supported by:
- Post-doctoral Science Foundation (No.2014M562582)

摘要/Abstract

摘要： 分析研究了CIKS-128分组密码算法在相关密钥-差分攻击下的安全性.利用DDP结构和非线性函数的差分信息泄漏规律构造了一条高概率相关密钥-差分特征，并给出攻击算法，恢复出了192bit密钥；在此基础上，对剩余64bit密钥进行穷举攻击，恢复出了算法的全部256bit密钥.攻击所需的计算复杂度为2⁷⁷次CIKS-128算法加密，数据复杂度为2⁷⁷个相关密钥-选择明文，存储复杂度为2^25.4字节存储空间.分析结果表明，CIKS-128算法在相关密钥-差分攻击条件下是不安全的.

关键词: 分组密码, 密码分析, CIKS-128分组算法, 相关密钥-差分攻击

Abstract: The security of CIKS-128 block cipher under related-key differential attack was studied.A related-key differential of high probability was constructed with the differential information leakages in the structure of DDPs and nonlinear functions.By proposing a corresponding key recovery attack based on the related-key differential,the master key of 192 bits was recovered.The rest 64 bits of the master key could be obtained by exhaustive search.The computational complexity,the data complexity and the memory complexity are 2⁷⁷ CIKS-128 block cipher encryptions,2⁷⁷ chosen-plaintexts and 2^25.4 bytes of storage resources,respectively.Analysis results show that CIKS-128 is unsafe under related-key differential attack.

Key words: block cipher, cryptanalysis, CIKS-128, related-key differential attack

中图分类号:

TN918.1

郭建胜, 崔竞一, 罗伟, 等. CIKS-128分组算法的相关密钥-差分攻击[J]. 电子学报, 2016, 44(8): 1837-1844.

GUO Jian-sheng, CUI Jing-yi, LUO Wei, et al. Related-Key Differential Attack on Block Cipher CIKS-128[J]. Acta Electronica Sinica, 2016, 44(8): 1837-1844.

参考文献

[1] Moldovyan A A.Fast block ciphers based on controlled permutations[J].Computer Science Journal of Moldova,2000,8(3):270-283.
[2] Moldovyan A A,Moldovyan N A.A cipher based on data-dependent permutation[J].Journal of Cryptology,2002,15(1):61-72.
[3] Sklavos N,Moldovyan N A,Koufopavlou O.High speed networking security:design and implementation of two new DDP-based ciphers[J].Mobile Networks and Applications-MONET,2005,10(1-2):219-231.
[4] Minh N,Bac D,Duy H.New SDDO-based block cipher for wireless sensor network security[J].I.J.Computer Network and Network Security,2010,10(3):54-60.
[5] Bac Do Thi,Minh Nguyen Hieu,Duy Ho Ngoc.An effective and secure cipher based on SDDO[J].I.J.Computer Network and Information Security,2012,4(11):1-10.
[6] Biryukov A,Nikolic I.Search for related-key differential characteristics in DES-Like ciphers[A].LNCS 6733:FSE 2011[C].Lyngby,Denmark:Springer,2011.18-34.
[7] Minier M,Naya-Plasencia M.A related key impossible differential attack against 22 rounds of the lightweight block cipher LBlock[J].Information Processing Letters,2012,112(16):624-629.
[8] 詹英杰,关杰,丁林,等.对简化版LBLock算法的相关密钥不可能差分攻击[J].电子与信息学报,2012,34(9):2161-2166.Zhan Ying-jie,Guan Jie,Ding Lin,et al.Related-key impossible differential attack on reduced round LBlock[J].Journal of Electronics&Information Technology,2012,34(9):2161-2166.(in Chinese)
[9] Tomer Ashur,Orr Dunkelman.A practical related-key boomerang attack for the full MMB block cipher[A].LNCS 8257:Cryptology and Network Security 2013[C].Paraty,Brazil:Springer.2013.20-22.
[10] Marine Minier.On the security of piccolo lightweight block cipher against related-key impossible differentials[A].LNCS 8250:INDOCRYPR 2013[C].Mumbai,India:Springer,2013.308-318.
[11] Lee Changhoon,Lee Sangjin,Park Jong Hyuk,et al.Security analysis of pure DDP-based cipher proper for multimedia and ubiquitous device[J].Telecommunication System,2010,44(3-4):267-279.
[12] Kang Jinkeon,Jeong Kitae,Yeo Sang-Soo,et al.Related-key attack on the MD-64 block cipher suitable for pervasive computing environments[A].26th International Conference on Advanced Information Networking and Applications Workshops (WAINA 2012)[C].Fukuoka:IEEE,2012.726-731.
[13] Ko Youngdai,Lee Changhoon,Hong Seokhie,et al.Related-key attacks on DDP based ciphers:CIKS-128 and CIKS-128H[A].LNCS 3348:INDOCRYPT 2004[C].Chennai,India:Springer,2004.191-205.
[14] Lee Changhoon,Kim Jongsung,Sung Jaechul,et al.Cryptanalysis of CIKS-128 and CIKS-128H suitable for intelligent multimedia and ubiquitous computing systems[J].Computing and Informatics,2011,30(3):447-466.
[15] Shusheng Liu,Zheng Gong,Libian Wang.Improved related-key differential attacks on reduced-round LBlock[A].Information and Communications Security-14th International Conference (ICICS 2012)[C].Hong Kong,China:Springer,2012.58-69.
[16] Alex Biryukov,Dmitry Khovratovich,Ivica Nikoli'c.Distinguisher and related-key attack on the full AES-256[A].CRYPTO'09,Santa Barbara[C].CA,USA:Springer,2009.231-249.
[17] 罗伟,郭建胜.Cobra-H64/128算法的相关密钥-差分攻击[J].电子学报,2013,41(8):1569-1573.LUO Wei,GUO Jian-sheng.Related-key differetial attacks on cobra-H64/128[J].Acta Electronica Sinica,2013,41(8):1569-1573.(in Chinese)

CIKS-128分组算法的相关密钥-差分攻击

Related-Key Differential Attack on Block Cipher CIKS-128

PDF

可视化

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 15

编辑推荐

Metrics

[1]	王安, 谷睿, 丁瑶玲, 张雪, 袁庆军, 祝烈煌. 基于持续性故障的分组密码算法S盒表逆向分析[J]. 电子学报, 2023, 51(3): 537-551.
[2]	欧庆于, 罗芳, 吴晓平, 杨鹏. 基于电压毛刺故障扰动的分组密码安全性度量方法研究[J]. 电子学报, 2021, 49(3): 417-423.
[3]	杨继林, 王念平. 类CLEFIA动态密码结构抵抗差分密码分析能力评估[J]. 电子学报, 2021, 49(11): 2279-2283.
[4]	马宿东, 金晨辉, 关杰. 一类ARIA型扩散结构分支数的研究[J]. 电子学报, 2020, 48(3): 449-455.
[5]	李航, 任炯炯, 陈少真. 减轮LEA密码算法的积分攻击[J]. 电子学报, 2020, 48(1): 17-27.
[6]	王念平. 一类分组密码变换簇抵抗线性密码分析的安全性评估[J]. 电子学报, 2020, 48(1): 137-142.
[7]	杜怡然, 南龙梅, 戴紫彬, 李伟. 可重构分组密码逻辑阵列加权度量模型及高能效映射算法[J]. 电子学报, 2019, 47(1): 82-91.
[8]	冯晓, 李伟, 戴紫彬, 马超, 李功丽. 面向分组密码的可重构异构多核并行处理架构[J]. 电子学报, 2017, 45(6): 1311-1320.
[9]	魏长河, 李俊志, 张少武. 对288轮Trivium算法的线性分析[J]. 电子学报, 2017, 45(6): 1456-1461.
[10]	王寿成, 严迎建, 徐进辉. 基于流体系结构的高效能分组密码处理器研究[J]. 电子学报, 2017, 45(4): 937-943.
[11]	伊文坛, 田亚, 陈少真. 减缩轮PRIDE算法的线性分析[J]. 电子学报, 2017, 45(2): 468-476.
[12]	王寿成, 李功丽, 严迎建, 徐进辉. 面向分组密码的四维度并行处理架构研究[J]. 电子学报, 2017, 45(10): 2457-2463.
[13]	李浪, 李肯立, 贺位位, 邹祎, 刘波涛. Magpie:一种高安全的轻量级分组密码算法[J]. 电子学报, 2017, 45(10): 2521-2527.
[14]	王念平. 四分组类CLEFIA变换簇抵抗差分密码分析的安全性评估[J]. 电子学报, 2017, 45(10): 2528-2532.
[15]	黄永洪, 郭建胜, 罗伟. LBlock算法的相关密钥-不可能差分攻击[J]. 电子学报, 2015, 43(10): 1948-1953.