Zodiac密码算法的多维零相关线性分析  

Multidimensional zero-correlation linear cryptanalysis on Zodiac cipher algorithm

作　　者：程璐[1,2] 魏悦川[1,2] 潘晓中[1,2] 李安辉[1,2] 

机构地区：[1]武警工程大学电子技术系,西安710086 [2]网络与信息安全武警部队重点实验室,西安710086

出　　处：《计算机应用》2017年第6期1605-1608,1624,共5页journal of Computer Applications

基　　金：国家自然科学基金资助项目(61202492;61572521);信息保障技术国家重点实验室开放基金(KJ-15-010);陕西省自然科学基金资助项目(2016JQ6030)~~

摘　　要：分组密码算法Zodiac支持3种密钥长度,分别为Zodiac-128、Zodiac-192、Zodiac-256。利用零相关线性分析方法评估了Zodiac算法的安全性,首先根据算法的结构特性,构造了一些关于Zodiac算法的10轮零相关线性逼近,然后对16轮Zodiac-192进行了多维零相关分析。分析结果显示:攻击过程中一共恢复了19个字节的密钥,其数据复杂度约为2^(124.40)个明密文对,计算复杂度为2^(181.58)次16轮加密。由此可得:16轮(即全轮)192 bit密钥的Zodiac算法(Zodiac-192)对于零相关线性分析方法是不安全的。Zodiac is a block cipher algorithm and it supports 3 master key lengths which are called Zodiac-128, Zodiac- 192 and Zodiac-256. The security of Zodiac algorithm was evaluated by using zero-correlation linear cryptanalysis. Firstly, 10- round zero-correlation linear approximations of Zodiac algorithm were constructed according to the structural characteristics of the algorithm. Then, the multidimensional zero-correlation linear cryptanalysis on 16-round Zodiac-192 was conducted. The analysis results show that 19-byte keys were restored totally in the process of attack, the data complexity was about 2124.40 known ciphertexts and the computational complexity was 2ross encryptions of 16-round. Thus the Zodiac-192 algorithm with the 192-bit key of 16 rounds （full rounds） is not immune to the zero-correlation linear cryptanalysis.

关 键 词：分组密码 Zodiac密码算法 线性掩码 线性逼近 零相关线性分析 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]