03-分组密码与DES详解.ppt

* * 小结 分组密码与流密码 block vs stream ciphers Feistel 密码设计与结构 design structure 轮数，函数F，密钥扩展 DES 算法细节 密码强度 工作模式 * * 第三章作业 思考题：3.5，3.7，3.8 * Lecture slides by Panfeng for “Cryptography and Network Security”, 3/e, by William Stallings * The exact realization of a Feistel network depends on the choice of the following parameters and design features: block size - increasing size improves security, but slows cipher key size - increasing size improves security, makes exhaustive key searching harder, but may slow cipher number of rounds - increasing number improves security, but slows cipher subkey generation algorithm - greater complexity can make analysis harder, but slows cipher round function - greater complexity can make analysis harder, but slows cipher fast software en/decryption - more recent concern for practical use ease of analysis - for easier validation testing of strength * Stallings Figure 6.3 illustrates the Electronic Codebook (ECB) Mode. * Stallings Figure 6.4 illustrates the Cipher Block Chaining (CBC) Mode. * Stallings Figure 6.5 illustrates the Cipher FeedBack (CFB) Mode. * Stallings Figure 6.6 illustrates the Output FeedBack (OFB) Mode. * Stallings Figure 6.7 illustrates the Counter (CTR) Mode. * Chapter 3 summary. * * P置换 * * 直接P置换（P-盒） P置换 * * F函数 * * DES第i轮迭代加密 * * * * 子密钥产生器 密钥（64 bit ） 置换选择1，PC1 置换选择2，PC2 Ci(28 bit) Di(28 bit) 循环左移 循环左移 除去第8,16, ?,64位(8个校验位) ki * * * * 置换选择1 循环左移的次数 （舍弃了奇偶校验位，即第8，16，…，64位） * * 压缩置换2 舍弃了第9,18,22,25,35,38,43,54比特位 * * 加密过程: L0R0 ?IP (64 bit明文) Li?Ri-1 i=1,...,16 (1) Ri?Li-1?f(Ri-1, ki) i=1,...,16 (2) 64 bit密文 ? IP-1(R16L16) (1)(2)运算进行16次后就得到密文组。 解密过程: R16L16 ?IP(64 bit密文) Ri-1?Li i=1,...,16 (3) Li-1?Ri?f(Li-1, ki) i=1,...,16 (4) 64 bit明文?IP-1 (R0L0) (3)(4)运算进行16次后就得到明文组。 DES加解密的数学表达 * * 安全性 DES的安全性完全依赖于所用的密钥。 从DES诞生起，对它的安全性就有激烈的争论，一直延续到现在 弱密钥和半弱密钥 DES算法在每次迭代时都有一个子密钥供加密用。如果给定初始密钥k，各轮的子密钥都相同，即有