一类广义Feistel密码的线性分析  

Linear Cryptanalysis for a Class of Generalized Feistel Ciphers

作　　者：张如文[1] 

机构地区：[1]中国科学院研究生院信息安全国家重点实验室,北京100039

出　　处：《中国科学院研究生院学报》2003年第1期31-38,共8页Journal of the Graduate School of the Chinese Academy of Sciences

基　　金：973项目(G19990 3 5 80 8); 863项目(2 0 0 1AA14 0 10 1)资助

摘　　要：针对一类广义Feistel密码提出一种求取密码线性偏差上界的方法.该分析方法的思路是,首先对密码体制线性偏差进行严格的数学描述,分别给出密码线性偏差与轮函数F及S盒的线性偏差的数学关系;然后确定密码线性偏差的上界.利用该方法给出了Proposes a method for seeking the upper bounds of maximum linear bias for these ciphers. This technique consists of two steps. Firstly, we give the mathematical relationship between linear bias of ciphers and linear bias of round function F and S box respectively by carrying out strictly mathematical expression of linear bias for ciphers. Next we determine the upper bounds of linear bias for ciphers. Using this method we give the upper bounds of linear bias within 32 rounds.

关 键 词：广义Feistel密码 线性密码分析 线性偏差 密码体制 S盒 轮函数 分组密码 

分 类 号：TN918.1[电子电信—通信与信息系统]