减轮分组密码算法MIBS的分析  

Cryptanalysis of Reduced-Round MIBS Block Cipher

作　　者：戴艺滨[1,2] 田亚[1,2] 陈少真[1,2] 

机构地区：[1]信息工程大学,河南郑州450001 [2]数学工程与先进计算国家重点实验室,河南郑州450001

出　　处：《信息工程大学学报》2017年第1期87-92,共6页Journal of Information Engineering University

基　　金：信息保障技术重点实验室开放基金项目资助(KJ-13-010)

摘　　要：利用S盒和线性层的性质,设计一个简单而快速的差分路径搜索算法,给出差分路径的估计;利用S盒的输出差分集合和轮子密钥之间的关系,给出14轮的差分分析;同时,可以找到两个短的、高概率相关密钥差分特征,即7轮和5轮相关密钥差分特征,构成12轮相关密钥矩形区分器,实现14轮MIBS算法的相关密钥矩形攻击,攻击需要2^(55)个选择明文,计算复杂度为2^(55)。研究结果表明,对于差分分析和相关密钥矩形攻击,MIBS算法仍是安全的,同时,结果也丰富了MIBS算法的安全性分析。By observing and utilizing the properties of S-box and linear layer, a simple and rapid searching algorithm of differential characteristics is presented, which provides an estimation of the differential characteristics. By utilizing the properties of S-box and its relation to the round subkeys, a differential attack on 14-round MIBS is given. Moreover, there exist some short related-key differ- ential characteristics with high-probability, for example, 7-round and 5-round related-key differenti- al characteristics, which can be used to construct 12-round related-key rectangle distinguisher and lead to an attack on 14-round MIBS. The attack requires 255 chosen plaintexts and the time complex- ity is 255. The results show that MIBS is secure against the differential attack and related-key rectan- gle attack. The results also improve the understanding of the security of SMS4 against related-key differential attack.

关 键 词：密码分析 分组密码 MIBS算法 差分攻击 相关密钥矩形攻击 

分 类 号：TN918.1[电子电信—通信与信息系统]