A New Method for Finding Impossible Differentials of Generalized Feistel Structures  

作　　者：CUI Ting JIN Chenhui MA Jing 

机构地区：[1]Information Science and Technology Institute, Zhengzhou 450001, China [2]Science and Technology on Information Assurance Laboratory, Beijing 100072, China

出　　处：《Chinese Journal of Electronics》2018年第4期728-733,共6页电子学报（英文版）

基　　金：supported by the National Natural Science Foundation of China(No.61772547,No.61402523,No.61272488,No.61572516,No.61502532);the Foundation of Science and Technology on Information Assurance Laboratory(No.KJ-13-007)

摘　　要：Impossible differential cryptanalysis is one of the most powerful attacks against modern block ciphers.In most cases, the resistance of a block cipher against impossible differential cryptanalysis can be measured by the length of the longest impossible differentials. By taking a closer look into the round function, we present a new method to find longer impossible differentials of wordoriented generalized Feistel structures. We conclude the existence of impossible differentials by the nonzero points of the XOR-ed masked differences in the middle round.This method uses differential style and its nonzero point to find the impossible differential, which is much easier than the classical impossible differential searching method.By applying our method, we can find several longest impossible differentials of some famous block cipher structures with SP(Substitution-permutation) round functions.If some extra conditions of the round function are taken into consideration(e.g. the permutation layer is designed as binary matrix or some sparse matrix), longer impossible differentials could be achieved by our method.Impossible differential cryptanalysis is one of the most powerful attacks against modern block ciphers.In most cases, the resistance of a block cipher against impossible differential cryptanalysis can be measured by the length of the longest impossible differentials. By taking a closer look into the round function, we present a new method to find longer impossible differentials of wordoriented generalized Feistel structures. We conclude the existence of impossible differentials by the nonzero points of the XOR-ed masked differences in the middle round.This method uses differential style and its nonzero point to find the impossible differential, which is much easier than the classical impossible differential searching method.By applying our method, we can find several longest impossible differentials of some famous block cipher structures with SP（Substitution-permutation） round functions.If some extra conditions of the round function are taken into consideration（e.g. the permutation layer is designed as binary matrix or some sparse matrix）, longer impossible differentials could be achieved by our method.

关 键 词：Impossible differential Generalized Feistel structure Differential style Nonzero point method 

分 类 号：TN918.1[电子电信—通信与信息系统]