对称密码的量子分析法综述  

A Survey of Quantum Cryptanalysis of Symmetric Cryptography

作　　者：董晓阳 DONG Xiao-Yang(Institute for Network Sciences and Cyberspace,Tsinghua University,Beijing 100084,China;State Key Laboratory of Cryptology,Beijing 100878,China;Shandong Institute of Blockchain,Jinan 250102,China;Zhongguancun Laboratory,Beijing 100194,China)

机构地区：[1]清华大学网络科学与网络空间研究院,北京100084 [2]密码科学技术国家重点实验室,北京100878 [3]山东区块链研究院,济南250102 [4]中关村实验室,北京100194

出　　处：《密码学报（中英文）》2024年第1期159-173,共15页Journal of Cryptologic Research

摘　　要：随着量子计算技术的不断进步, 密码学研究者不得不深入研究量子计算模型对经典对称密码算法带来的安全威胁. 本文综述了近年来在量子计算模型下针对经典分组密码和结构、认证和认证加密算法、哈希函数等的量子通用攻击和专用攻击等. 由于量子计算模型在不同敌手假设下取得的攻击效率不同, 因此本文对不同攻击假设进行了分类, 并归纳总结了不同假设下密码研究者所取得的重要研究成果.With the continuous advancement of quantum computing technology, cryptographers have to deeply study the security threats on symmetric cryptographic algorithms posed by quantum computing models. This paper summarizes quantum generic attacks and dedicated attacks on block ciphers and structures, message authentication code (MAC) and authenticated encryption algorithms, hash functions, etc. under the quantum computing models proposed in recent years. Since in quantum settings, different adversary assumptions lead to different attack efficiencies, this paper classifies and summarizes some important research results obtained by cryptographers under different assumptions.

关 键 词：量子计算 对称密码 密码分析 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]