从线性校验子分析方法浅析曾肯成先生的密码分析思想  

An Analysis of Mr. Zeng Kencheng’s Cryptanalysis Thought from the Linear Syndrome Method

作　　者：冯登国[1] FENG Deng-Guo(Institute of Software,Chinese Academy of Sciences,Beijing 100190,China)

机构地区：[1]中国科学院软件研究所,北京100190

出　　处：《密码学报（中英文）》2024年第2期255-262,共8页Journal of Cryptologic Research

摘　　要：曾肯成先生于1986年洞察到了密码体制中的熵漏现象,后来在此基础上提出著名的线性校验子分析方法.本文全面剖析了线性校验子分析方法的发展历程,由此深刻揭示了曾先生的密码分析思想的精髓.首先,介绍曾先生通过观察Geffe序列生成器的熵漏现象,提出线性校验子分析方法的朴素思想的过程及其蕴含的思想方法;其次,介绍曾先生通过在Geffe序列生成器基础上凝练出的一般问题,提出解决这一问题的一般方法—线性校验子分析方法的过程及其蕴含的思想方法;再次,介绍曾先生通过分析线性校验子分析方法存在的缺陷,进一步完善和改进线性校验子分析方法的过程及其蕴含的思想方法;最后,通过分析从相关分析方法到线性校验子分析方法的进阶之路,阐述了线性校验子分析方法这把利剑的威力.Mr.Zeng Kencheng had an insight into the phenomenon of entropy leakage in the cryptosystem in 1986,and then proposed the famous linear syndrome method on this basis.This paper comprehensively analyzes the development of the linear syndrome method,which deeply reveals the essence of Mr.Zeng Kencheng’s cryptanalysis thought.First of all,the paper introduces Mr.Zeng’s naive thought process of linear syndrome method and its implied thought method by observing the entropy leak phenomenon of Geffe sequence generator;Secondly,it introduces the general problem that Mr.Zeng condensed on the basis of Geffe sequence generator,and puts forward a general method to solve this problem—the process of linear syndrome method and the thinking method contained therein;Thirdly,it introduces Mr.Zeng’s process of further improving the linear syndrome method by analyzing the defects of the linear syndrome method and the thinking method contained therein;Finally, by analyzing the advanced path from correlation analysis to linear syndrome analysis, thepower of linear syndrome analysis is expounded.

关 键 词：序列密码 密码分析 线性校验子分析方法 相关分析方法 择多原理 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]