Multiple Related-Key Differential Attacks on Pure DDP-Based Cipher  

作　　者：GUO Jiansheng LUO Wei WANG Kun 

机构地区：[1]Zhengzhou Information Science and Technology Institute, Zhengzhou 450004, China [2]Unit 78179 of the PLA, Chengdu 611830, China

出　　处：《Chinese Journal of Electronics》2016年第4期608-613,共6页电子学报（英文版）

基　　金：supported by the National Natural Science Foundation of China(No.61272488)

摘　　要：By constructing three types of related-key differential characteristics,we present three corresponding related-key differential attacks on the cipher.As the independence of the characteristics,we could recover 64 bits of the cipher's master key with 2^(58.6)chosen plain-texts,2^(58.8)full-round DDP-64 encryptions and 2^(12.8)bits of storage resources.To break the cipher,we only need to implement an exhaustive search for the rest 64 bits of the master key.By constructing three types of related-key differential characteristics,we present three corresponding related-key differential attacks on the cipher.As the independence of the characteristics,we could recover 64 bits of the cipher＇s master key with 2^（58.6）chosen plain-texts,2^（58.8）full-round DDP-64 encryptions and 2^（12.8）bits of storage resources.To break the cipher,we only need to implement an exhaustive search for the rest 64 bits of the master key.

关 键 词：Block cipher DDP-64 block cipher Data dependent permutations（DDPs） Multiple related-key differential attacks 

分 类 号：TN918.4[电子电信—通信与信息系统]