SMS4的积分区分器的研究  

Research On The Integral Distinguisher For SMS4

作　　者：张振民[1] 郑秀林[2] 史瑞[2] 马静宜[3] 

机构地区：[1]西安电子科技大学通信工程学院,西安710071 [2]北京电子科技学院信息安全系,北京100070 [3]北京电子科技学院通信工程系,北京100070

出　　处：《北京电子科技学院学报》2013年第4期40-45,共6页Journal of Beijing Electronic Science And Technology Institute

摘　　要：SMS4算法是国内官方于2006年2月公布的第一个商用分组密码标准。积分攻击是一种利用平衡性的选择明文攻击。首先简明介绍了分组密码算法SMS4的结构。通过选择不同形式的特定明文来观察平衡字集的传播路径,研究了SMS4算法的四轮、五轮、六轮、七轮和八轮积分区分器,在此基础上就可以进行积分攻击。由此可知,低轮数的SMS4算法对Square攻击是不免疫的。The SMS4 algorithm is the first commercial block cipher standard , which was announced in February, 2006.Integral attack is a kind of chosen -plaintext attacks that using balance .First of all, we concisely introduce the structure of block cipher SMS 4.By selecting the different forms of specific plaintexts , we observe the propagation paths of the balanced character sets , study the SMS4 ’ s 4 -round, 5-round, 6-round, 7-round and 8-round integral distinguisher , so based on these results we can launch the integral attacks .It can be seen that SMS 4 with low numbers of rounds was not im-mune to square attack .

关 键 词：SMS4算法 SQUARE攻击 积分区分器 选择明文 平衡集 SMS4 

分 类 号：TN918.1[电子电信—通信与信息系统]