摘要
随着分组密码应用研究的不断深入,研究者发现,“动态可变”分组密码设计可有效提升分组密码算法的应用灵活性和部署安全性。CLEFIA算法遵循“动态可变”思想,一些学者对CLEFIA算法的线性变换层加以改进,使得第6t(t≥1)轮中的扩散层可以从{0,1}4上的多个线性双射变换中任意选取。为分析评估CLEFIA动态密码结构的安全性能,文章主要采取零相关线性分析理论,利用中间相错技术和矩阵表示方法,分析构造CLEFIA动态密码结构的零相关线性区分器。研究证明,在轮函数为双射的前提条件下,CLEFIA动态密码结构动态线性层控制参数μ_(i)∈F_(2),(0≤i≤4)无论取何值,总存在8轮零相关线性区分器;当控制参数μ_(0)=0时,存在9轮零相关线性区分器。
With the deepening of the research on block cipher application,the design of“dynamic variable”block cipher can effectively improve the application flexibility and deployment security of block cipher algorithm.CLEFIA algorithm follows the idea of“dynamic variable”,some scholars have improved the linear transformation layer of CLEFIA algorithm,so that the diffusion layer in the 6t(t≥1)round can be arbitrarily selected from the{0,1}4 multiple linear bijection transforms.In order to analyze and evaluate the security performance of CLEFIA dynamic cipher structure,this paper mainly adopted the theory of zero-correlation linear analysis,and used the miss-in-the-middle technique and matrix representation method to analyze the zerocorrelation linear discriminator of CLEFIA dynamic cipher structure.The results show that under the condition that the wheel function is bijective,no matter what the control parametersμ_(i)∈F_(2),(0≤i≤4)of the dynamic linear layer of CLEFIA dynamic cipher structure are,there are always 8 rounds of zero-correlation linear discriminators.When controlling parametersμ_(0)=0,there are 9 rounds of zero-correlation linear discriminators.
作者
沈霞民
熊涛
李华
沈璇
SHEN Xiamin;XIONG Tao;LI Hua;SHEN Xuan(College of Information and Communication,National University of Defense Technology,Wuhan 430010,China)
出处
《信息网络安全》
CSCD
北大核心
2024年第6期948-958,共11页
Netinfo Security
基金
国家自然科学基金[62002370,62272470]
国防科技大学科研计划项目基金[ZK21-36]。
关键词
分组密码
CLEFIA动态密码结构
零相关线性分析
中间相错技术
矩阵表示
block cipher
CLEFIA dynamic cipher structure
zero correlation linear analysis
miss-in-the-middle technique
matrix representation
