两类扩散结构特征向量的研究与应用.pdfVIP

第 33 卷第 4 期 电 子 与 信 息 学 报 Vol.33No.4 2011 年 4 月 Journal of Electronics Information Technology Apr. 2011 两类扩散结构特征向量的研究与应用 崔 霆* 金晨辉 (信息工程大学电子技术学院 郑州 450004) 摘 要：SP(Substitution Permutation)模型是分组密码常用模型之一。该文提出了基于扩散结构特征向量构造 SP 模型高概率差分传递链和线性逼近链的方法。利用该方法构造了 ARIA 算法 6 轮概率为 2−168 的差分传递链，并 构造了仅使用一个 S 盒的 6 轮弱化 ARIA 算法达到概率上界 2−144 的差分传递链。结果表明，SP 模型的设计者应当 尽量选择特征向量个数较少且不含低重量特征向量的扩散结构。此外，该文还给出了准对合 MDS(Maximum Distance Separable)矩阵及循环移位矩阵的特征值以及特征向量计数公式。 关键词：SP 模型；ARIA 密码算法；扩散结构；特征向量；计数 中图分类号：TN918.1 文献标识码： A 文章编号：1009-5896(2011)-04-0854-04 DOI: 10.3724/SP.J.1146.2010.00837 Research and Application for Characteristic Vectors of Two Kinds of Diffusion Structures Cui Ting Jin Chen-hui (Electronic Technology Institute, Information Engineering University, Zhengzhou 450004, China) Abstract: SP (Substitution Permutation) structure is often used in block ciphers. This paper provides a method which could construct high probability differential trails and linear trails by using characteristic vectors of the diffusion layer. By this method some differential trails of ARIA can be constructed, these trails could reach probability 2−168 for 6 rounds. And for 6 rounds reduced ARIA, who only employs a single S box, some differential trails can be got which could reach the highest probability 2−144 . The results show that the SP cipher designers should choose those diffusion layers with fewer characteristic vectors as possible. And diffusion layers should never have low weight characteristic vectors. Additionally, the characteristic value as well as the count value of quasi-involu