一类广义Feistel密码的安全性评估  

SECURITY EVALUATION FOR A CLASS OF GENERALIZED FEISTEL CIPHERS

作　　者：吴文玲[1] 贺也平[2] 

机构地区：[1]中国科学院软件研究所信息安全国家重点实验室,北京100080 [2]中国科学院信息安全技术工程研究中心,北京100080

出　　处：《电子与信息学报》2002年第9期1177-1184,共8页Journal of Electronics & Information Technology

基　　金：973项目(No.G1999035802);国家自然科学基金(No.60103023)

摘　　要：该文评估一类广义Feistel密码(GFC)抵抗差分和线性密码分析的能力:如果轮函数是双射且它的最大差分和线性特征的概率分别是p和q,则16轮GFC的差分和线性特征的概率的上界为p^7和q^7;如果轮函数采用SP结构且是双射,S盒的最大差分和线性特征的概率是ps和qs,P变换的分支数为Pd,则16轮GFC的差分和线性特征的概率的上界为(ps)^(3Pd+1)和(qs)^(3Pd+1)。This paper studies the security evaluation against differential and linear attacks for a class of generalized Feistel ciphers. If the round function is bijective and its maximum differential and linear characteristic probabilities are p and q, then the upper bounds of maximum differential and linear characteristic probabilities for 16-round ciphers are p7 and q7. If the round function is bijective and SP structure, the maximum differential and linear characteristic probabilities of S-boxes are ps and qs, the branch number of P is P^, then the upper bounds of maximum differential and linear characteristic probabilities for 16-round ciphers are (ps)3Pd+l and (qs)3Pd+1.

关 键 词：差分密码分析 线性密码分析 分支数 Feistel密码 安全性 

分 类 号：TN918.1[电子电信—通信与信息系统]