CSCE 715Network Systems Security：欧安会715network系统安全.pptVIP

9/12/2006 (C) 2003 Chin-Tser Huang CSCE 715:Network Systems Security Chin-Tser Huang huangct@cse.sc.edu University of South Carolina AES Cipher – Rijndael Process data as 4 groups of 4 bytes (State) Has 9/11/13 rounds in which state undergoes: byte substitution (1 S-box used on every byte) shift rows (permute bytes between groups/columns) mix columns (subs using matrix multiply of groups) add round key (XOR state with key material) Initial XOR key material incomplete last round All operations can be combined into XOR and table lookups, hence very fast and efficient AES Encryption and Decryption AES Data Structure AES Encryption Round Byte Substitution A simple substitution of each byte Uses one table of 16x16 bytes containing a permutation of all 256 8-bit values Each byte of state is replaced by byte in corresponding row (left 4 bits) and column (right 4 bits) eg. byte {95} is replaced by row 9 col 5 byte, which is {2A} S-box is constructed using a defined transformation of the values in GF(28) Shift Rows Circular byte shift in each row 1st row is unchanged 2nd row does 1 byte circular shift to left 3rd row does 2 byte circular shift to left 4th row does 3 byte circular shift to left Decryption does shifts to right Since state is processed by columns, this step permutes bytes between the columns Mix Columns Each column is processed separately Each byte is replaced by a value dependent on all 4 bytes in the column Effectively a matrix multiplication in GF(28) using prime poly m(x) =x8+x4+x3+x+1 Add Round Key XOR state with 128 bits of the round key Again processed by column (though effectively a series of byte operations) Inverse for decryption is identical since XOR is own inverse, just with correct round key Designed to be as simple as possible AES Key Expansion Take 128-bit (16-byte) key and expand into array of 44/52/60 32-bit words Start by copying key into first 4 words Then loop creating words that depend on values in previous and 4 places back in 3