SMS4-like结构以及NBC算法的量子算法攻击研究  

Research on Quantum Cryptanalysis on SMS4-like Structure and NBC Algorithm

作　　者：尤启迪 钱新 周旋 袁野 吴兆阳 YOU Qi-Di;QIAN Xin;ZHOU Xuan;YUAN Ye;WU Zhao-Yang(Department of Computer Science and Technology,Tsinghua University,Beijing 100084,China;Beijing Institute of Satellite Information Engineering,Beijing 100086,China)

机构地区：[1]清华大学计算机科学与技术系,北京100084 [2]北京卫星信息工程研究所,北京100086

出　　处：《密码学报》2020年第6期864-874,共11页Journal of Cryptologic Research

摘　　要：本文利用Simon量子算法和Grover搜索算法首次给出对SMS4-like结构,和作为改进的第二类广义Feistel结构的代表算法之一的NBC算法的量子算法攻击.对SMS4给出6轮量子区分器,进行10轮量子密钥恢复攻击;首次对SMS4-like结构给出(2d-2)轮量子区分器,进行(3d-2)轮量子密钥恢复攻击.对NBC-128给出6轮量子区分器,进行11轮量子密钥恢复攻击;对NBC-256给出10轮量子区分器,进行16轮量子密钥恢复攻击.By using the Simon’s algorithm and Grover’s algorithm,this paper presents a quantum attack on the SMS4-like structure and the NBC algorithm,which is one of the representative algorithms of the improved Type-2 generalized Feistel structure.A 6-round quantum distinguisher on SMS4 is constructed,which can be used to derive 10-round quantum key recovery attack,with more rounds than the previous optimal result.A(2d-2)-round quantum distinguisher on the SMS4-like structure is constructed,which can be used to derive(3d-2)-round of quantum key recovery attacks.Moreover,a 6-round quantum distinguisher on NBC-128 is constructed,which can be used to derive 11-round of quantum key recovery attacks,and 10-round of quantum distinguisher and 16-round of quantum key recovery attacks on NBC-256.

关 键 词：SMS4-like结构 NBC算法 Simon算法 GROVER算法 量子密码分析 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]