对NBC-128的安全性分析  

Cryptanalysis of NBC-128

作　　者：杨江帅 陈怀凤 鲍金凤 康潇文 Yang Jiangshuai;Chen Huaifeng;Bao Jinfeng;Kang Xiaowen(The 6th Research Institute of China Electronics Corporation,Beijing 100083,China;The Institute of Tourism,Beijing Union University,Beijing 110101,China;61428 Military,Beijing 100097,China)

机构地区：[1]中国电子信息产业集团有限公司第六研究所,北京100083 [2]北京联合大学旅游学院,北京110101 [3]61428部队,北京100097

出　　处：《电子技术应用》2021年第4期91-96,共6页Application of Electronic Technique

摘　　要：NBC算法是由徐洪等人设计的基于广义Feistel结构的分组密码算法,支持128/128、128/256和256/2563种分组和密钥尺寸,其非线性部分采用16 bit S盒。对分组长度为128 bit的两个NBC版本算法进行了改进的安全性分析。针对不可能差分攻击,修正了原有分析过程,可以分析17轮NBC-128/256、15轮NBC-128/128;对于多维零相关攻击,扩展了攻击轮数,可以分析19轮NBC-128/256、16轮NBC-128/128,针对NBC-128/256的结果在轮数上是已知最长的;对于积分攻击,给出了新的12轮积分路线,需要的数据量低于原有结果。NBC is a family of block ciphers using Generalized Feistel structure,designed by Xu Hong et al.There are three block and key sizes,i.e.,128/128,128/256 and 256/256.A 16-bit Sbox is involved in the cipher as the non-linear component.This paper makes improved cryptanalysis on the two NBC versions with block size 128.Using impossible differential cryptanalysis,the corrected results are given which cover 17-round NBC-128/256 and 15-round NBC-128/128.The attack rounds of multi-dimensional zero-correlation linear cryptanalysis are expanded,which covers 19-round NBC-128/256 and 16-round NBC-128/128.The 19-round attack is the longest as far as we know.Also,new 12-round integral distinguishers are proposed,which require less data compared to the existing integral attacks.

关 键 词：NBC-128算法 不可能差分分析 零相关线性分析 积分分析 

分 类 号：TN918[电子电信—通信与信息系统] TP309.7[电子电信—信息与通信工程]