PRIDE算法的差分特性研究  

Differential Properties on Block Cipher PRIDE

作　　者：崔竞一 郭建胜[1,2] 刘翼鹏[1] 

机构地区：[1]信息工程大学,河南郑州450001 [2]信息保障技术重点实验室,北京100000

出　　处：《信息工程大学学报》2015年第6期645-649,共5页Journal of Information Engineering University

基　　金：国家自然科学基金资助项目(11204379);博士后科学基金资助项目(2014M562582)

摘　　要：研究了轻量级分组密码算法PRIDE的差分分析与相关密钥-差分分析下的安全性。依据分支数理论,分析了算法基于"宽轨迹"策略设计的线性变换层的差分传递规律,给出了线性变换层32个不动点和88个2轮循环差分特征。综合考虑S盒差分传递规律,构造出算法的32条概率为2-58的与24条概率为2-60的15轮差分路径;同时依据密钥调度算法的差分传递规律,给出了算法16条概率为2-36的18轮相关密钥差分路径。在上述路径的基础上,可给出算法19轮差分分析结果与全轮的相关密钥差分分析结果。The security of the lightweight block cipher PRIDE designed by Albrecht et al. that appears in CRYPTO 2014 under differential cryptanalysis and related-key differential cryptanalysis is studied. Based on the theory of branch numbers,the differential properties of the linear layer based on the wide trail strategy are studied. Besides,32 fixed points and 88 2-round iterative chains are given. With consideration of the differential properties of S-box,32 15-round differentials with the probability of 2- 58 and 24 15-round differentials with the probability of 2- 60 are constructed. Furthermore,16 18-round related-key differentials with the probability of 2- 36 are listed based on the differential properties of key generation algorithm. Based on the differentials mentioned above,differential attack on reduced round PRIDE and related-key differential attack on full PRIDE can be raised.

关 键 词：差分分析 差分特征 轻量级分组密码算法 PRIDE 

分 类 号：TN918.1[电子电信—通信与信息系统]