第四章 对称密码算法课件.ppt

第四章 对称密码算法;双重DES;双重DES的讨论;中途(meet-in-the-middle)攻击;对双重DES的中途攻击的分析;三重DES的四种模型;双密钥的三重DES（Triple DES with Two Keys);对双密钥的三重DES的分析-i;对双密钥的三重DES的分析-ii;三密钥的三重DES（Triple DES with Three Keys);三密钥的三重DES分析;IDEA算法;64位分组,128位密钥 运算: XOR ?,模216（65536）加 ? ,模 (216+1)（65537）? 乘 三种运算均不满足分配律与结合律 有大量弱密钥 难以直接扩展到128位块;IDEA设计思想;IDEA加密算法;IDEA每一轮;IDEA输出变换阶段;IDEA的子密钥;BLOWFISH算法;BLOWFISH的加密和解密操作;BLOWFISH的加密伪代码;BLOWFISH算法单个循环的细节;BLOWFISH算法讨论;RC5加密算法;RC5;RC5基本运算;密钥扩展;密钥的初始化;密钥扩展;加解密运算图;加密算法;解密算法;CAST-128加密算法;CAST-128算法之讨论;RC2加密算法;RC4流加密算法;AES介绍;Rijndael简介;NIST对Rijndael的评估（2000）;NIST对Rijndael的评估（2000）;NIST对Rijndael的评估（2000）;NIST对Rijndael的评估（2000）;Attacks on Implementations The operations used by Rijndael are among the easiest to defend against power and timing attacks. The use of masking techniques to provide Rijndael with some defense against these attacks does not cause significant performance degradation relative to the other finalists, and its RAM requirement remains reasonable. Rijndael appears to gain a major speed advantage over its competitors when such protections are considered.;Encryption vs. Decryption The encryption and decryption functions in Rijndael differ. One FPGA study reports that the implementation of both encryption and decryption takes about 60% more space than the implementation of encryption alone. Rijndael’s speed does not vary significantly between encryption and decryption, although the key setup performance is slower for decryption than for encryption.;Key Agility Rijndael supports on-the-fly subkey computation for encryption. Rijndael requires a one-time execution of the key schedule to generate all subkeys prior to the first decryption with a specific key. This places a slight resource burden on the key agility of Rijndael.;Other Versatility and Flexibility Rijndael fully supports block sizes and key sizes of 128 bits, 192 bits and 256 bits, in any combination. In principle, the Rijndael structure can accommodate any block sizes and key sizes that