基于Simon算法的量子分析方法概述  

Overview of Quantum Analysis Methods Based on Simon Algorithm

作　　者：张福众 刘刚 邹昆 穆道光 董新锋 ZHANG Fuzhong;LIU Gang;ZOU Kun;MU Daoguang;DONG Xinfeng(No.30 Institute of CETC,Chengdu Sichuan 610041,China;National Key Laboratory of Security Communication,Chengdu Sichuan 610041,China)

机构地区：[1]中国电子科技集团公司第三十研究所,四川成都610041 [2]保密通信全国重点实验室,四川成都610041

出　　处：《信息安全与通信保密》2024年第10期16-26,共11页Information Security and Communications Privacy

摘　　要：1994年提出的Shor算法给公钥密码算法RSA和ECC带来了巨大的威胁,在对称密码领域,威胁主要来自Grover算法和Simon算法。其中基于Grover算法的攻击可以通过增加密钥长度来规避,更多的威胁来自Simon算法。通过介绍多种基于Simon算法对工作模式与密码结构的量子攻击方案,在量子计算假设下给出了与经典计算环境下不同的安全性结论。说明了研究对称密码量子安全性理论的必要性,对设计抗量子安全的对称密码结构与工作模式给出了理论指导。The Shor algorithm proposed in 1994 poses a huge threat to public key cryptography algorithms such as RSA and ECC.In the field of symmetric cryptography,the threats mainly stem from Grover algorithm and Simon algorithm.Among them,attacks based on Grover algorithm can be evaded by increasing the key length,and more threats come from Simon algorithm.By introducing various quantum attack schemes based on Simon algorithm against working modes and cryptographic structures,security conclusions are given under the assumption of quantum computing,which is different from the classical computing environment.This demonstrates the necessity of researching quantum security theory of symmetric cryptography,and provides theoretical guidance for designing quantum security-resistant symmetric cryptographic structures and working modes.

关 键 词：Simon算法 量子攻击 密码结构 工作模式 

分 类 号：TN918.1[电子电信—通信与信息系统]