计算机网络安全双语chapter 2_2.pptVIP

* * * * * * * * 由于输入的一位将影响两个替换，所以输出对输入的依赖性将传播得更快，这就叫做Avalanche effect * * * * * * * * * * * * * * * * * * * * * * * * * * * * * S-box S-Box (Substitute and Shrink) 48 bits ? 32 bits. (8*6 ? 8 *4) 2 bits row S i i = 1,…8. I1 I2 I3 I4 I5 I6 O1 O2 O3 O4 4 bits column S1 Each row and column contain different numbers. 0 1 2 3 4 5 6 7 8 9…. 15 0 14 4 13 1 2 15 11 8 3 1 0 15 7 4 14 2 13 1 10 2 4 1 14 8 13 6 2 11 15 3 15 12 8 2 4 9 1 7 5 Example: input: 100110 output: ??? 4 4 4 4 4 4 4 4 6 6 6 6 6 6 6 6 + + + + + + + + 6 6 6 6 6 6 6 6 S8 S1 S2 S7 S3 S4 S5 S6 4 4 4 4 4 4 4 4 Permutation The permutation produces “spread” among the chunks/S-boxes! Mangler Function E P 56-bit key?16 subkeys (48-bit each) The strategy used for creating the different round keys from the main key is meant to introduce confusion(混乱) into the encryption process Per-Round Key Generation 28 bits 28 bits 48 bits Ki One round Circular Left Shift Circular Left Shift 28 bits 28 bits Permutation with Discard Initial Permutation of DES key C i-1 D i-1 C i D i Round 1,2,9,16: single shift Others: two bits Permutation Substitution 3DES(Triple DES) 3DES uses three keys and three executions of the DES algorithm Encryption Encrypt-decrypt-encrypt C=Ek3[Dk2[Ek1(P)]] Decryption P=Dk1[Ek2[Dk3(C)]] Think about 3DES When K1 = K2 = K3, the 3DES algorithm coincides with the DES algorithm Why not C=Ek3[Ek2[Ek1(p)]] P=Dk1[Dk2[Dk3(C)]] AES Block cipher: AES128, AES192, AES256 It is not a Feistel structure The decryption algorithm is not identical to the encryption algorithm. Larger blocks, longer keys plaintext 128-bit ciphertext 128-bit Key 128/192/256-bit [1998] the National Institute of Standards and Technology (NIST