轻量级分组密码Pyjamask的不可能差分分析  

Impossible differential cryptanalysis of lightweight block cipher Pyjamask

作　　者：刘亚[1,2,3] 唐伟明[1,2] 沈致远[1,2] 陆海宁 王凌云 Liu Ya;Tang Weiming;Shen Zhiyuan;Lu Haining;Wang Lingyun(a.School of Optical-Electrical&Computer Science&Engineering,University of Shanghai for Science&Technology,Shanghai 200093,China;Shanghai Key Laboratory of Modern Optical System,Ministry of Education,University of Shanghai for Science&Technology,Shanghai 200093,China;Dept.of Computer Science&Engineering,Shanghai Jiao Tong University,Shanghai 200240,China;School of Electronic Information&Electrical Engineering,Shanghai Jiao Tong University,Shanghai 200240,China;Shanghai Viewsource Information Science&Technology Co.,Ltd.,Shanghai 200241,China)

机构地区：[1]上海理工大学光电信息与计算机工程学院,上海200093 [2]上海理工大学上海市现代化光学系统重点实验室,上海200093 [3]上海交通大学计算机科学与工程系,上海200240 [4]上海交通大学电子信息与电气工程学院,上海200240 [5]上海观源信息科技有限公司,上海200241

出　　处：《计算机应用研究》2021年第11期3428-3432,共5页Application Research of Computers

基　　金：国家“十三五”密码发展基金理论课题(MMJJ20180202);上海市“科技创新行动计划”高新技术领域项目(19511103900);闵行区中小企业技术创新计划(2018MH110)。

摘　　要：Pyjamask是美国国家技术标准研究院征选后量子时代轻量级密码算法中进入第二轮的候选分组密码,对其抵抗现在流行的不可能差分分析分析为未来在实际系统中使用起到重要的作用。提出一些2.5轮不可能差分链并分析它们的结构特点和攻击效率,在一些最有效的不可能差分链的前后各接1轮和半轮,形成4轮Pyjamask多重不可能差分攻击路径。攻击结果表明Pyjamask的行混淆运算扩散性比较强,能较好地抵抗不可能差分分析,此结果是对Pyjamask安全性分析的一个重要补充。Pyjamask is the second-round candidate for the NIST lightweight cryptography selection.In order to use it in the practical system safely,it is very important to analysis its security against the popular attacks.This paper studied the security of Pyjamask against impossible differential cryptanalysis.Specifically,it constructed several 2.5 rounds of impossible differentials and studied their structures’properties and the attacking efficiency.By appending one round at the top and half a round at the bottom of some effective impossible differentials,it proposed two 4-round multiple impossible differential attacking paths.The results show that Pyjamask can resist against impossible differential cryptanalysis effectively because it has a very powerful diffuse operation MixRows.Meanwhile,these results are important supplements for the security of Pyjamask.

关 键 词：轻量级分组密码 Pyjamask 不可能差分链 不可能差分分析 

分 类 号：TN918.4[电子电信—通信与信息系统]