适于硬件实现的S盒构造方法  

Construction method of S-box suitable for hardware implementation

作　　者：杨宏志[1] 韩文报[1] 赵龙[1] 

机构地区：[1]信息工程大学信息工程学院,郑州450002

出　　处：《计算机应用》2010年第3期674-676,684,共4页journal of Computer Applications

基　　金：国家自然科学基金重大研究计划项目(90104035);国家863计划项目(2006AA01Z425)

摘　　要：有限域上的乘法求逆变换和仿射变换混合后良好的密码学性质是Rijndeal、Camellia、SMS4等分组密码算法S盒设计的基础,总结了三种分组密码算法的S盒密码学性质,在此基础上提炼出一类S盒的构造模型,并根据硬件实现的特点,利用循环矩阵给出了一大批S盒。与Rijndeal算法S盒相比,此类S盒的密码学性质更加优良,同时硬件实现的资源开销与Rijndeal算法S盒大体相当。The design of S-box was used in some block ciphers such as Rijndeal,Camellia,SMS4,which was based on good cryptographic properties coming from integration of inverse transformation over finite fields and affine transformation.The authors investigated cryptographic properties of the three block ciphers above,and presented a kind of S-box construction model.According to the features of hardware implementation,a lot of S-boxes were constructed by using circular matrix.It claims that the new kind of S-box possesses some better properties compared with the Rijndeal S-box,and there is no significant difference in cost of hardware implementation between them.

关 键 词：分组密码 S盒 硬件实现 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]