L-Feistel密码模型的差分和线性安全性分析  

Differential and Linear Security Analysis of L-Feistel Cipher Model

作　　者：张策[1] 金晨辉[1] 

机构地区：[1]信息工程大学,河南郑州450001

出　　处：《信息工程大学学报》2017年第2期206-211,共6页Journal of Information Engineering University

摘　　要：对L-Feistel密码模型抵抗差分和线性分析的能力进行研究。给出r轮差分传递链中活动F函数个数的下确界,当轮函数是双射时,r轮差分传递链中活动F函数个数的下确界;给出半周期分别为2、3、4的差分传递链的结构,并证明由半周期差分传递链可以构造出周期差分传递链;给出L-Feistel密码模型的等效模型,并证明L-Feistel模型的差分传递链与其等效模型的线性传递链是对偶的;证明了L-Feistel模型的等效模型的线性传递链中活动F函数具有类似的结论,为L-Feistel模型的抗差分攻击和线性攻击的设计和分析提供了依据。This paper researches on the L-Feistel cipher model＇ s resistance against the differential and linear cryptanalysis, to figure out the infimum of the number of the active F functions in the r- round differential characteristic, as well as that when the round function is bijective. It also explores the differential characteristic structure with the half cycles of 2, 3, 4 respectively, and proves that the differential characteristic of full cycle can be constructed by that of half cycle. Moreover, it in- troduces the equivalent model of L-Feistel cipher model, and proves the duality between L-Feiste] model＇ s differential characteristic and the linear approximation of its equivalent model. Moreover, it proves that the similar conclusion can be drawn as well towards the active F function in the linear ap- proximation of the L-Feistel model＇ s equivalent model, which has provided the basis for the design and analysis of L-Feistel model＇ s resistance against differential and linear attack.

关 键 词：密码学 分组密码 差分传递链 线性传递链 活动F函数 对偶性 

分 类 号：TN918.1[电子电信—通信与信息系统]