CLEFIA动态密码结构的零相关线性区分器构造研究  

Research on the Construction of Zero-Correlation Linear Discriminator for CLEFIA Dynamic Cipher Structure

作　　者：沈霞民 熊涛 李华[1] 沈璇 SHEN Xiamin;XIONG Tao;LI Hua;SHEN Xuan(College of Information and Communication,National University of Defense Technology,Wuhan 430010,China)

机构地区：[1]国防科技大学信息通信学院,武汉430010

出　　处：《信息网络安全》2024年第6期948-958,共11页Netinfo Security

基　　金：国家自然科学基金[62002370,62272470];国防科技大学科研计划项目基金[ZK21-36]。

摘　　要：随着分组密码应用研究的不断深入,研究者发现,“动态可变”分组密码设计可有效提升分组密码算法的应用灵活性和部署安全性。CLEFIA算法遵循“动态可变”思想,一些学者对CLEFIA算法的线性变换层加以改进,使得第6t(t≥1)轮中的扩散层可以从{0,1}4上的多个线性双射变换中任意选取。为分析评估CLEFIA动态密码结构的安全性能,文章主要采取零相关线性分析理论,利用中间相错技术和矩阵表示方法,分析构造CLEFIA动态密码结构的零相关线性区分器。研究证明,在轮函数为双射的前提条件下,CLEFIA动态密码结构动态线性层控制参数μ_(i)∈F_(2),(0≤i≤4)无论取何值,总存在8轮零相关线性区分器;当控制参数μ_(0)=0时,存在9轮零相关线性区分器。With the deepening of the research on block cipher application,the design of“dynamic variable”block cipher can effectively improve the application flexibility and deployment security of block cipher algorithm.CLEFIA algorithm follows the idea of“dynamic variable”,some scholars have improved the linear transformation layer of CLEFIA algorithm,so that the diffusion layer in the 6t(t≥1)round can be arbitrarily selected from the{0,1}4 multiple linear bijection transforms.In order to analyze and evaluate the security performance of CLEFIA dynamic cipher structure,this paper mainly adopted the theory of zero-correlation linear analysis,and used the miss-in-the-middle technique and matrix representation method to analyze the zerocorrelation linear discriminator of CLEFIA dynamic cipher structure.The results show that under the condition that the wheel function is bijective,no matter what the control parametersμ_(i)∈F_(2),(0≤i≤4)of the dynamic linear layer of CLEFIA dynamic cipher structure are,there are always 8 rounds of zero-correlation linear discriminators.When controlling parametersμ_(0)=0,there are 9 rounds of zero-correlation linear discriminators.

关 键 词：分组密码 CLEFIA动态密码结构 零相关线性分析 中间相错技术 矩阵表示 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]