基于MILP的轻量级密码算法ACE与SPIX的线性分析

刘帅; 任小广; 王世雄; 关杰; 张啸川; 谭捷; 王军

doi:10.12263/DZXB.20230673

您当前的位置：

首页 >

文章列表页 >

基于MILP的轻量级密码算法ACE与SPIX的线性分析

学术论文 | 更新时间：2025-12-08

- 基于MILP的轻量级密码算法ACE与SPIX的线性分析
- Linear Analysis of Lightweight Cipher ACE and SPIX Based on Mixed-Integer Linear Programming
- 电子学报 2024年52卷第9期页码：3065-3074
- 作者机构：
  
  1.智能博弈与决策实验室，北京 100091
  2.军事科学院，北京 100091
  3.战略支援部队信息工程大学密码工程学院，河南郑州 450001
- 作者简介：
  
  [ "刘帅男，1993年12月出生于山东省泰安市.现为智能博弈与决策实验室助理研究员.主要研究方向为认证加密算法的分析与应用、深度学习等.E-mail： sssshuai1993@163.com" ]
  [ "关杰女，1974年9月出生于河南省郑州市.现为信息工程大学密码工程学院教授、博士生导师.主要研究方向为密码理论和密码算法分析等." ]
- 基金信息：
  
  国家自然科学基金(62102440)
- DOI：10.12263/DZXB.20230673
  中图分类号： TN918.1
- 收稿：2023-07-14，
  
  修回：2024-04-09，
  
  纸质出版：2024-09-25
- 稿件说明：
移动端阅览
刘帅, 任小广, 王世雄, 等. 基于MILP的轻量级密码算法ACE与SPIX的线性分析[J]. 电子学报, 2024, 52(09): 3065-3074.

LIU Shuai, REN Xiao-guang, WANG Shi-xiong, et al. Linear Analysis of Lightweight Cipher ACE and SPIX Based on Mixed-Integer Linear Programming[J]. Acta Electronica Sinica, 2024, 52(09): 3065-3074.
刘帅, 任小广, 王世雄, 等. 基于MILP的轻量级密码算法ACE与SPIX的线性分析[J]. 电子学报, 2024, 52(09): 3065-3074. DOI：10.12263/DZXB.20230673

LIU Shuai, REN Xiao-guang, WANG Shi-xiong, et al. Linear Analysis of Lightweight Cipher ACE and SPIX Based on Mixed-Integer Linear Programming[J]. Acta Electronica Sinica, 2024, 52(09): 3065-3074. DOI：10.12263/DZXB.20230673

摘要

研究了轻量级密码算法ACE与SPIX的线性性质.给出了环型与门组合结构精确的混合整数线性规划下的线性性质刻画，并将算法ACE与SPIX的非线性操作转化为环型与门组合.基于此构建了ACE置换与SLISCP置换的混合整数线性规划下的线性模型，求解模型得到了2至4步ACE置换与2至5步SLISCP置换最优的线性迹.证明了7步、12步ACE置换分别达到了128比特与320比特的安全目标，7步、13步SLISCP置换分别达到了128比特与256比特的安全目标.对于任意步数的ACE置换与SLISCP置换，认证加密算法ACE-AE-128与SPIX均能够抵抗明文处理阶段的线性区分攻击.

Abstract

The linear property of lightweight cipher ACE and SPIX was researched. The linear property of ring AND-gate combination was described accurately with mixed-integer linear programming. The nonlinear operation of ACE and SPIX was transformed into ring AND-gate combination. Based on this

the linear models of ACE permutation and SLISCP permutation were constructed with mixed-integer linear programming. The models returned the optimal linear characteristics of 2-step to 4-step ACE permutation and 2-step to 5-step SLISCP permutation. It was proved that 7-step and 12-step ACE permutation achieved the 128-bit security and 320-bit security respectively

and 7-step and 13-step SLISCP permutation achieved the 128-bit security and 256-bit security respectively. For the ACE permutation and SLISCP permutation with any number of steps

authenticated encryption algorithm ACE-AE-128 and SPIX can resist the linear distinguish attack of plaintext processing stage.

关键词

Keywords

references

POSCHMANN A Y . Lightweight Cryptography: Cryptographic Engineering for a Pervasive World [D ] . Bochum : Ruhr-University Bochum , 2009 .

YANG G Q , ZHU B , SUDER V , et al . The simeck family of lightweight block ciphers [C ] // International Workshop on Cryptographic Hardware and Embedded Systems . Berlin : Springer , 2015 : 307 - 329 .

BANIK S , PANDEY S K , PEYRIN T , et al . GIFT: A small present [C ] // International Conference on Cryptographic Hardware and Embedded Systems . Cham : Springer , 2017 : 321 - 345 .

BOGDANOV A , KNUDSEN L R , LEANDER G , et al . PRESENT: An ultra-lightweight block cipher [C ] // International Workshop on Cryptographic Hardware and Embedded Systems . Berlin : Springer , 2007 : 450 - 466 .

SUZAKI T , MINEMATSU K , MORIOKA S , et al . TWINE: A lightweight block cipher for multiple platforms [C ] // International Conference on Selected Areas in Cryptography . Berlin : Springer , 2013 : 339 - 354 .

罗芳 , 欧庆于 , 周学广 , 等 . 轻量级分组密码MIBS-80算法的Biclique分析 [J ] . 软件学报 , 2015 , 26(Suppl.(1)): 8-16.

LUO F , OU Q Y , ZHOU X G , et al . A biclique cryptanalysis on lightweight block cipher MIBS-80 [J ] . Journal of Software , 2015 , 26(Suppl.(1)): 8-16. (in Chinese)

LIU S , GUAN J , HU B . Fault attacks on authenticated encryption modes for GIFT [J ] . IET Information Security , 2022 , 16 ( 1 ): 51 - 63 .

李浪 , 李肯立 , 贺位位 , 等 . Magpie:一种高安全的轻量级分组密码算法 [J ] . 电子学报 , 2017 , 45 ( 10 ): 2521 - 2527 .

LI L , LI K L , HE W W , et al . Magpie: A high-security lightweight block cipher [J ] . Acta Electronica Sinica , 2017 , 45 ( 10 ): 2521 - 2527 . (in Chinese)

Lawrence B . Submission requirements and evaluation criteria for the lightweight cryptography standardization process [EB/OL ] . (2018) . https://csrc.nist.gov/projects/lightweight-cryptography https://csrc.nist.gov/projects/lightweight-cryptography .

吴文玲 . 认证加密算法研究进展 [J ] . 密码学报 , 2018 , 5 ( 1 ): 68 - 82 .

WU W L . Research advances on authenticated encryption algorithms [J ] . Journal of Cryptologic Research , 2018 , 5 ( 1 ): 68 - 82 . (in Chinese)

MITSURU M . On correlation between the order of S-boxes and the strength of DES [C ] // Advances in Cryptology — EUROCRYPT'94 . Berlin : Springer , 1995 : 366 - 375 .

WANG S P , HU B , GUAN J , et al . MILP-aided method of searching division property using three subsets and applications [C ] // International Conference on the Theory and Application of Cryptology and Information Security . Cham : Springer , 2019 : 398 - 427 .

KÖLBL S , LEANDER G , TIESSEN T . Observations on the SIMON block cipher family [C ] // Annual Cryptology Conference . Berlin : Springer , 2015 : 161 - 185 .

SONG L , HUANG Z J , YANG Q Q . Automatic differential analysis of ARX block ciphers with application to SPECK and LEA [C ] // Australasian Conference on Information Security and Privacy . Cham : Springer , 2016 : 379 - 394 .

SUN S W , GERAULT D , LAFOURCADE P , et al . Analysis of AES, SKINNY, and others with constraint programming [J ] . IACR Transactions on Symmetric Cryptology , 2017 : 281 - 306 .

SUN S W , HU L , WANG P , et al . Automatic security evaluation and (related-key) differential characteristic search: Application to SIMON, PRESENT, LBlock, DES(L) and other bit-oriented block ciphers [C ] // International Conference on the Theory and Application of Cryptology and Information Security . Berlin : Springer , 2014 : 158 - 178 .

SHI D P , SUN S W , DERBEZ P , et al . Programming the Demirci-Selcuk meet-in-the-middle attack with constraints [C ] // International Conference on the Theory and Application of Cryptology and Information Security . Cham : Springer , 2018 : 3 - 34 .

HU K , SUN S W , TODO Y , et al . Massive superpoly recovery with nested monomial predictions [M ] // Lecture Notes in Computer Science . Cham : Springer , 2021 : 392 - 421 .

SASAKI Y , TODO Y . New algorithm for modeling S-box in MILP based differential and division trail search [C ] // International Conference for Information Technology and Communications . Cham : Springer , 2017 : 150 - 165 .

FU K , WANG M Q , GUO Y H , et al . MILP-based automatic search algorithms for differential and linear trails for speck [C ] // International Conference on Fast Software Encryption . Berlin : Springer , 2016 : 268 - 288 .

SAHA D , SASAKI Y , SHI D P , et al . On the security margin of TinyJAMBU with refined differential and linear cryptanalysis [J ] . IACR Transactions on Symmetric Cryptology , 2020 : 152 - 174 .

ZHOU C N , ZHANG W T , DING T Y , et al . Improving the MILP-based security evaluation algorithm against differential/linear cryptanalysis using a divide-and-conquer approach [J ] . IACR Transactions on Symmetric Cryptology , 2020 : 438 - 469 .

刘帅 , 关杰 , 胡斌 , 等 . 基于混合整数线性规划的MORUS初始化阶段的差分分析 [J ] . 电子与信息学报 , 2023 , 45 ( 7 ): 2537 - 2545 .

LIU S , GUAN J , HU B , et al . Differential analysis of the initialization of MORUS based on mixed-integer linear programming [J ] . Journal of Electronics & Information Technology , 2023 , 45 ( 7 ): 2537 - 2545 . (in Chinese)

AAGAARD M , ALTAWY R , GONG G , et al . ACE: An authenticated encryption and hash algorithm [EB/OL ] . (2018) . https://csrc.nist.gov/projects/lightweight-cryptography https://csrc.nist.gov/projects/lightweight-cryptography .

RIHAM A , GONG G , MORGAN H , et al . SPIX: An authenticated cipher submission to the NIST LWC competition [EB/OL ] . (2019) . https://csrc.nist.gov/CSRC/media/Projects/lightweight-cryptography/documents/round-2/spec-doc-rnd2/spix-spec-round2.pdf https://csrc.nist.gov/CSRC/media/Projects/lightweight-cryptography/documents/round-2/spec-doc-rnd2/spix-spec-round2.pdf .

刘帅 , 关杰 , 胡斌 , 等 . 基于MILP的轻量级密码算法ACE的差分分析 [J ] . 通信学报 , 2023 , 44 ( 1 ): 39 - 48 .

LIU S , GUAN J , HU B , et al . Differential analysis of lightweight cipher algorithm ACE based on MILP [J ] . Journal on Communications , 2023 , 44 ( 1 ): 39 - 48 . (in Chinese)

SHI DP , SUN SW , YU S , et al . Correlation of quadratic boolean functions: Cryptanalysis of all versions of full MORUS [C ] // CRYPTO 2019 . Santa Barbara : Springer , 2019 : 180 - 209 .

浏览量

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

基于MILP对轻量级密码算法FBC-128的差分分析

UPRFloor:一种动态可重构FPGA建模方法与布局策略