韩国加密标准的安全性分析  

Security on Korean Encryption Standard

作　　者：吴文玲[1,2] 马恒太[1,2] 冯登国[1,2] 

机构地区：[1]中国科学院软件研究所信息安全国家重点实验室,北京100080 [2]中国科学院信息安全技术工程研究中心,北京100080

出　　处：《电子学报》2003年第4期585-588,共4页Acta Electronica Sinica

基　　金：国家自然科学基金 (No 60 1 0 30 2 3);973项目 (No .G1 9990 3580 2 )

摘　　要：SEED是韩国的数据加密标准 ,设计者称用线性密码分析攻击SEED的复杂度为 2 335.4 ,而用本文构造的15轮线性逼近攻击SEED的复杂度为 2 32 8.为了说明SEED抵抗差分密码分析的能力 ,设计者首先对SEED的变体SEED 做差分密码分析 ,指出 9轮SEED 对差分密码分析是安全的 ;利用SEED 的扩散置换和盒子的特性 ,本文构造SEED 的 9轮截断差分 ,因此 10轮SEED 对截断差分密码分析是不免疫的 .本文的结果虽然对SEED的实际应用构成不了威胁 ,但是显示了SEED的安全性并没有设计者所称的那样安全 .SEED is the Korean encryption standard. It was pointed by designers that the complexity for the linear cryptanalysis of SEED is 2335.4. Using the linear approximations in this paper, the complexity for the linear cryptanalysis of SEED is 2328. To analyze the differential cryptanalysis of SEED, the modified SEED was considered. It was pointed out that 9-round modified SEED was secure against the differential cryptanalysis. There are 9-round truncated differentials available to the truncated differential cryptanalysis in the modified SEED. Hence, 10-round modified SEED is not immune to truncated differential cryptanalysis. Although the results can not threaten the application of SEED, they show the security of SEED is not as strong as that designers predicted.

关 键 词：分组密码 安全性 差分密码分析 线性密码分析 截断差分密码分析 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]