一种PUFFIN类SPN型分组密码的积分攻击.PDF

32 3 JOURNAL OFNATIONAL UNIVERSITYOF DEFENSE TECHNOLOGY Vol.32 No.3 2010 :1001- 2486(2010) 03- 0139- 05 X PUFFIN SPN 1 2 1,2 魏悦川 , 孙 兵, 李 超 (1. , 410073; 2. , 410073; :PUFFIN 64bit 128bit SPN , , , PUFFIN 5 , 5 6 , 21 34 20 8 PUFFIN 8 2 , 2 , 2 , 8 PUFFIN PUFFIN SPN , 3 , : ; ;PUFFIN ; :TN918 :A An Integral Attack on PUFFIN and PUFFIN-like SPN Cipher 1 2 1, 2,3 WEI Yue-chuan ,SUN Bing ,LI Chao (1. College of Computer, NationalUniv. of DefenseTechnology,Changsha 410073, China; 2. College of Science, NationalUniv. of DefenseTechnology,Changsha 410073, China) Abstract: PUFFIN is a block cipherwith 64-bit block size and128-bit keysize. For evaluating its security, thebalance at bi-t level was analyzed. A 5-round integral distinguisher was constructed and then extended to a 6-round one based on the theory of higher order integral. Byusing the 6-round distinguisher, 8-round attackwas performed. For 8-round attack, the data complexity, time complexity and space complexitywere, and respectively. The result shows that PUFFIN reduced to8 rounds is not immune to the integral attack. Besides, the cipher with SPN-structure and permutation-linear layer which at least has 3-round integral distinguisher is proved. The result also indicates the method for findingthe distinguisher. Key words: block cipher;integral attack;PUFFIN; attack complexity Rijndae-l 128 (AES) , ,AES , , ,