对Sosemanuk算法改进的猜测决定攻击  

Improved guess-and-determine attack on sosemanuk

作　　者：谢端强[1] 李恒[1] 李瑞林[2] 戴清平[1] 

机构地区：[1]国防科技大学理学院,湖南长沙410073 [2]国防科技大学电子科学与工程学院,湖南长沙410073

出　　处：《国防科技大学学报》2012年第6期79-83,共5页Journal of National University of Defense Technology

基　　金：国家自然科学基金资助项目(61070215;61103192)

摘　　要：Sosemanuk算法是欧洲eSTREAM计划最终获选的七个算法之一。从比特层面对该算法进行剖析,通过对Serpent1组件S盒、模232加法和线性反馈移位寄存器的研究,找到了关于内部状态的一个方程组,并利用Groebner基方法改进了对Sosemanuk算法基于字的猜测决定攻击。结果表明只需要猜测7个32比特的字就可以完全确定出其余5个32比特的内部状态,其攻击的复杂度为O(2192)。Sosemanuk is one of the stream ciphers that have been selected into the final portfolio for the eSTREAM project. Sosemanuk from the view point of bit-level was described. By studying the S-box of Serpentl, the modular addition, and the linear feedback shift register, a kind of equation between the bits of the internal states was obtained, based on which an improved word-oriented guess-and-determine attack on Sosemanuk is proposed. This improved attack utilizes the Groebner basis method to solve the equation system and can determine the other 5 words of the internal state by guessing just 7 words, and thus the complexity is pvoved to be O（2192）.

关 键 词：eSTREAM计划 Sosemanuk算法 猜测决定攻击 GROEBNER基 

分 类 号：TN918.1[电子电信—通信与信息系统]