New automatic tool for finding impossible differentials and zero-correlation linear approximations  

作　　者：Tingting CUI Shiyao CHEN Kai FU Meiqin WANG Keting JIA 

机构地区：[1]School of Cyberspace,Hangzhou Dianzi University,Hangzhou 310018,China [2]Key Laboratory of Cryptologic Technology and Information Security,Ministry of Education,Shandong University,Jinan 250100,China [3]Department of Computer Science and Technology,Tsinghua University,Beijing 100084,China [4]China Academy of Information and Communications Technology,Beijing 100191,China

出　　处：《Science China(Information Sciences)》2021年第2期242-244,共3页中国科学（信息科学）（英文版）

基　　金：supported by National Key Research and Development Program of China(Grant No.2017YFA0303903);National Cryptography Development Fund(Grant Nos.MMJJ20170121,MMJJ20170102);Zhejiang Province Key R&D Project(Grant No.2017C01062);National Natural Science Foundation of China(Grant Nos.61572293,61502276,61692276);Major Scientific and Technological Innovation Projects of Shandong Province(Grant No.2017CXGC0704);National Natural Science Foundation of Shandong Province(Grant No.ZR2016FM22)。

摘　　要：Dear editor,Impossible differential cryptanalysis and zero-correlation linear cryptanalysis are two powerful methods in the block cipher field.Herein,we present an automatic tool to find impossible differentials(IDs)and zero-correlation linear approximations(ZCLAs)for both ARX and S-box-based ciphers.Similar to the idea of using mixed-integer linear programming(MILP)models for differential cryptanalysis in[1],we first use linear inequalities to describe all the target cipher's components exactly.

关 键 词：field. DIFFERENTIAL LINEAR 

分 类 号：O157.4[理学—数学]