Zodiac算法新的Square攻击  

New Square Attack on Zodiac

作　　者：张鹏[1] 李瑞林[1] 李超[1,2] 

机构地区：[1]国防科技大学理学院数学与系统科学系,长沙410073 [2]中国科学院软件所信息安全国家重点实验室,北京100190

出　　处：《电子与信息学报》2010年第11期2790-2794,共5页Journal of Electronics & Information Technology

基　　金：国家自然科学基金(60803156);信息安全国家重点实验室开放基金(01-07)资助课题

摘　　要：该文重新评估了Zodiac算法抗Square攻击的能力。Zodiac算法存在8轮Square区分器,该文首先根据算法的结构特性,给出了Zodiac的4个等价结构,而后利用等价结构得到了两个新的9轮Square区分器。利用新的区分器,对不同轮数的Zodiac算法实施了Square攻击,对12轮,13轮,14轮,15轮和16轮Zodiac的攻击复杂度分别为237.3,262.9,296.1,2137.1和2189.5次加密运算,选择明文数分别为210.3,211,211.6,212.1和212.6。结果表明:完整16轮192bit密钥的Zodiac算法是不抗Square攻击的。This paper re-evaluates the security of Zodiac against Square attacks.There are 8-round Square distinguishers of Zodiac.In this paper,four equivalent structures of Zodiac are given,based on which two new 9-round distinguishers are proposed.Then by using the 9-round Square distinguishers,Square attacks are applied to 12/13/14/15/16-round Zodiac with time complexities being 237.3,262.9,296.1,2137.1,2189.5,and data complexities being 210.3,211,211.6,212.1,212.6,respectively.Additionally,these attacks show that full 16-round Zodiac-192 is not immune to Square attack.

关 键 词：密码学 Zodiac 等价结构 区分器 SQUARE攻击 

分 类 号：TN918[电子电信—通信与信息系统]