关于三个流密码的安全性(英文)  

On the Security of Three Stream Ciphers

作　　者：张斌[1] 伍宏军[2] 冯登国[1] 鲍丰 

机构地区：[1]信息安全国家重点实验室(中国科学院研究生院),北京100049 [2]Institute for Infocomm Research,singapore119613

出　　处：《软件学报》2005年第7期1344-1351,共8页Journal of Software

基　　金：国家自然科学基金No.60273027;国家重点基础研究发展规划(973)No.G1999035802;国家杰出青年学者科学基金No.60025205~~

摘　　要：对3个新近提出的流密码S1,S2及S3进行了分析.这3个流密码被设计用于GSM网络加密,且分别对应于不同的安全性等级.结果表明,S1和S2都易受已知明文攻击,而S3不能正确解密.只需少量的密文字节和可以忽略的计算量就能够完全破解S1和S2.模拟实验结果表明,S3不能正确工作.结论是这3个流密码要么及其脆弱,要么就是不能正确解密,因此它们并不能在GSM网络安全方面扮演设计者所希望的角色.In this paper three newly proposed stream ciphers S1, S2 and S3 are analyzed. These stream ciphers are designed with respect to different levels of GSM security. The results show that both S1 and S2 are vulnerable to the known plaintext attacks and S3 can not decrypt correctly. With negligible amount of computation and few known keystream bytes, S1 and S2 can be broken completely. Furthermore, simulation results show that S3 cannot work correctly. The conclusion is that these stream ciphers are either extremely weak or poorly designed so that they cannot play the role as the designers hope in GSM network security.

关 键 词：流密码 安全性 GSM网络 线性反馈移位寄存器 字节 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]