广义类CLEFIA动态密码结构抵抗差分和线性密码分析的安全性评估  

Security Evaluation of Generalized CLEFIA-Like Dynamic Cipher Structures Against Differential and Linear Cryptanalysis

作　　者：成磊 沈璇 任传伦 CHENG Lei;SHEN Xuan;REN Chuan-lun(School of Computer Science and Engineering,University of Electronic Science and Technology,Chengdu,Sichuan 611731,China;China Electronic Technology Cyber Security Company,Chengdu,Sichuan 610041,China;College of Information and Communication,National University of Defense Technology,Wuhan,Hubei 430010,China;The 36th Research Institute of China Electronics Technology Corporation,Jiaxing,Zhejiang 314033,China)

机构地区：[1]电子科技大学计算机科学与工程学院,四川成都611731 [2]中国电子科技网络信息安全有限公司,四川成都610041 [3]国防科技大学信息通信学院,湖北武汉430010 [4]中国电子科技集团公司第三十六研究所,浙江嘉兴314033

出　　处：《电子学报》2024年第8期2571-2580,共10页Acta Electronica Sinica

基　　金：国家自然科学基金(No.62227805);国防科技大学科研计划项目(No.ZK21-36)。

摘　　要：基于四分支类CLEFIA动态密码结构,对2m分支类CLEFIA动态密码结构进行分析,证明基于循环变换的类CLEFIA动态密码结构等价于CLEFIA密码结构.对2m分支类CLEFIA动态密码结构最小差分活动轮函数个数的上界进行研究,证明每轮变换P_(i)为基于GF(2^(s))上{0,1}构成的动态线性变换,2m分支类CLEFIA动态密码结构最小差分活动轮函数上界为[2^(2m-1)/2^(2m)-1mr],其中,r为轮数.另外,可将上述关于差分性质的结果推广得到类CLEFIA动态密码结构线性性质的结果.Based on the four-branch CLEFIA-like dynamic cipher structure,this paper analyzes the 2m-branch CLE⁃FIA-like dynamic cipher structure,proving the equivalence between the cyclically permuted transformation-based CLEFIAlike dynamic cipher structure and the CLEFIA cipher structure.Furthermore,the upper bound on the minimum number of differentially active rounds for the 2m-branch CLEFIA-like dynamic cipher structure is investigated.It is demonstrated if each round transformation P_(i) is the dynamic linear transformation consisting of{0,1}on GF(2^(s)),the upper bound on the minimum number of differentially active rounds for the 2m-branch CLEFIA-like dynamic cipher structure is[2^(2m-1)/2^(2m)-1mr] extended to the lin⁃ear properties of the CLEFIA-like dynamic cipher structure.

关 键 词：密码结构 类CLEFIA动态密码结构 差分密码分析 线性密码分析 活动轮函数 

分 类 号：TN918.1[电子电信—通信与信息系统]