Revised cryptanalysis for SMS4  

作　　者：Lei CHENG Bing SUN Chao LI 

机构地区：[1]College of Science, National University of Defense Technology [2]State Key Laboratory of Cryptology,P.O.Box 5159 [3]State Key Laboratory of Information Security, Institute of Information Engineering,Chinese Academy of Sciences

出　　处：《Science China(Information Sciences)》2017年第12期139-147,共9页中国科学（信息科学）（英文版）

基　　金：supported by National Natural Science Foundation of China(Grant Nos.61672530,61402515);Research Fund for the Doctoral Program of Higher Education of China(Grant No.2012150112004)

摘　　要：SMS4 is released by the Chinese government as part of the WAPI standard for the wireless networks.At ICICS 2007 and CRYPTO 2015, Lu and Sun et al. constructed some 12-round impossible differentials and12-round zero correlation linear hulls, respectively. In this paper, it is proved that the distinguishers constructed by Lu and Sun et al. are independent with the details of the non-linear layers though they concentrated on the specific S-boxes. This indicates that for the structure deduced by SMS4, there always exist 12-round impossible differentials and 12-round zero correlation linear hulls.SMS4 is released by the Chinese government as part of the WAPI standard for the wireless networks.At ICICS 2007 and CRYPTO 2015, Lu and Sun et al. constructed some 12-round impossible differentials and12-round zero correlation linear hulls, respectively. In this paper, it is proved that the distinguishers constructed by Lu and Sun et al. are independent with the details of the non-linear layers though they concentrated on the specific S-boxes. This indicates that for the structure deduced by SMS4, there always exist 12-round impossible differentials and 12-round zero correlation linear hulls.

关 键 词：SMS4 impossible differential zero correlation linear hull structure integral 

分 类 号：TN918.1[电子电信—通信与信息系统]