A Further Understanding of Differential-Linear Cryptanalysis  

作　　者：REN Jiongjiong CHEN Shaozhen 

机构地区：[1]State Key Laboratory of Mathematical Engineering and Advanced Computing,Zhengzhou 450001,China [2]State Key Laboratory of Cryptology,Beijing 100878,China

出　　处：《Chinese Journal of Electronics》2020年第4期660-666,共7页电子学报（英文版）

基　　金：supported by the National Cipher Development Foundation(No.MMJJ20180203);the State Key Laboratory of Mathematical Engineering and Advanced Computation Open Foundation(No.2018A03);the Foundation of Science and Technology on Information Assurance Laboratory(No.KJ-17-002)。

摘　　要：Differential-linear cryptanalysis has attracted much attention since proposed to attack DES in 1994,and then some generalized theories are developed to complement and unify the method.However,the links between differential-linear cryptanalysis and other important cryptanalysis methods have been still missing.The motivation is to fix the gap.By establishing some boolean equations,we propose the mathematical links among differential,linear and differential-linear attacks.We then generalise the definition of capacity and present some properties of the capacity of differential function.The links and properties are employed to explore the relationships between multidimensional differential-linear hulls and integral distinguishers.We show that a multidimensional differential-linear hull of certain correlation always implies the existence of an integral distinguisher and a zero-correlation linear hull,while a special integral distinguisher indicates the existence of a multidimensional differential-linear hull.

关 键 词：Block cipher Differential cryptanalysis Linear cryptanalysis Differential-linear cryptanalysis Integral distinguisher ZERO-CORRELATION 

分 类 号：TN918.1[电子电信—通信与信息系统]