Rijndael算法的结构归纳与攻击分析  

Structure Cryptanalysis of Rijndael Algorithm

作　　者：袁巍[1] 张云英[1] 胡亮[1] 李宏图[1] 王程明[1] 

机构地区：[1]吉林大学计算机科学与技术学院,长春130012

出　　处：《吉林大学学报（信息科学版）》2008年第5期487-493,共7页Journal of Jilin University（Information Science Edition）

基　　金：国家自然科学基金资助项目(60473099);教育部新世纪优秀人才支持计划基金资助项目(NCET-06-0300)

摘　　要：为了提高Rijndael算法的安全性,总结了Rijndael中单个变换的作用以及合并后产生的新特点。通过使用差分分析和Square分析,对Rijndael算法进行攻击分析,得出Rijndael算法对差分分析免疫,而Square分析可有效攻击多轮Rijndael的结论。Square分析有效的两个条件是Rijndael平衡性在第4轮改变和每轮子密钥之间可逆。通过改进密钥生成算法,消除轮子密钥的可逆性,使Square攻击无效,从而提高了算法的安全性。For improving the safety properties of Rijndael algorithm, the use of each stage and the new feature of merged stages are summarized for Rijndael algorithm. By analyzing of differential attack and square we get the result that differential attack is useless to Rijndael but square can effectively attack Rijndael. The two conditions that square can success are the change of balance of Rijndael and the reversibility among each round of sub-key. Improved key generation algorithm eliminates the reversibility of sub-key and makes square invalid. Therefore the result and the safety properties of the algorithm are improved.

关 键 词：积分攻击 差分攻击 RIJNDAEL算法 密钥生成 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]