改进的KLEIN算法及其量子分析  

Improved KLEIN algorithm and its quantum analysis

作　　者：李艳俊 葛耀东 王琦 张伟国 刘琛 LI Yanjun;GE Yaodong;WANG Qi;ZHANG Weiguo;LIU Chen(Information Industry Information Security Evaluation Center,The 15th Research Institute of China Electronics Technology Group Corporation,Beijing 100083,China;Department of Cryptographic Science and Technology,Beijing Electronic Science and Technology Institute,Beijing 100070,China)

机构地区：[1]中国电子科技集团公司第十五研究所信息产业信息安全测评中心,北京100083 [2]北京电子科技学院密码科学与技术系,北京100070

出　　处：《计算机应用》2024年第9期2810-2817,共8页journal of Computer Applications

基　　金：北京市自然科学基金资助项目(4234084);河南省网络密码技术重点实验室研究课题(LNCT2021-A09)。

摘　　要：KLEIN自提出之后经历了截断差分分析、积分分析等攻击,加密结构具有实际安全性,但是由于密钥扩展算法的脆弱性导致了全轮密钥恢复攻击。首先,修改密钥扩展算法,提出一种改进后的算法N-KLEIN;其次,采用in-place方法对S盒进行高效量子电路实现,减小了电路的宽度和深度,提高了量子电路的实现效率;再次,使用LUP分解技术实现混淆操作的量子化;继次,对N-KLEIN进行量子电路设计,提出全轮N-KLEIN的高效量子电路。最后,评估N-KLEIN算法量子实现的资源占用,并与PRESENT、HIGHT等现有的轻量级分组密码的量子实现占用资源进行对比;同时,基于Grover算法对密钥搜索攻击所需要的代价进行深入研究,给出Clifford+T模型下N-KLEIN-{64,80,96}使用Grover算法搜索密钥需要的代价,并评估了N-KLEIN的量子安全性。对比结果表明,N-KLEIN算法量子实现的成本明显较低。KLEIN has experienced attacks such as truncated difference cryptanalysis and integral cryptanalysis since it was proposed.Its encryption structure has actual security,but the vulnerability of the key expansion algorithm leads to fullround key recovery attacks.Firstly,the key expansion algorithm was modified and an improved algorithm N-KLEIN was proposed.Secondly,an efficient quantum circuit was implemented on the S-box using the in-place method,which reduced the width and depth of the circuit and improved the implementation efficiency of the quantum circuit.Thirdly,the quantization of obfuscation operations was achieved using LUP decomposition technology.Then,an efficient quantum circuit was designed for N-KLEIN,and an efficient quantum circuit for all round N-KLEIN was proposed.Finally,the resource occupation for the quantum implementation of full-round N-KLEIN was evaluated and compared with the resources occupied by existing quantum implementations of lightweight block ciphers such as PRESENT and HIGHT.At the same time,an indepth study was conducted on the cost of key search attacks based on Grover algorithm,and the cost of N-KLEIN-{64,80,96}using Grover algorithm to search for keys under the Clifford+T model was given,and then the quantum security of N-KLEIN was evaluated.Comparative results indicate that the quantum implementation cost of N-KLEIN algorithm is significantly lower.

关 键 词：轻量级分组密码 KLEIN 量子电路 S盒 GROVER算法 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]