一类Feistel密码的线性分析  

LINEAR CRYPTANALYSIS FOR A CLASS OF FEISTEL CIPHERS

作　　者：吕述望[1] 张如文[1] 

机构地区：[1]中国科学技术大学研究生院信息安全国家重点实验室,北京100039

出　　处：《电子与信息学报》2003年第9期1237-1242,共6页Journal of Electronics & Information Technology

基　　金：973项目(NO.G1999035808);863项目(NO.2001AA140101)

摘　　要：该文提出一种新的求取分组密码线性偏差上界的方法,特别适用于密钥线性作用的Feistel密码。该分析方法的思路是,首先对密码体制线性偏差进行严格的数学描述,分别给出密码线性偏差与轮函数F及S盒的线性偏差的数学关系;然后通过求取线性方程组最小重量解,确定密码线性偏差的上界。In this paper, a new method is proposed for seeking the upper bounds of maximum linear bias for block ciphers, which is especially applicable to a class of Feistel ciphers that key is XORed with data. This technique consists of two steps. Firstly, the mathematical relationship between linear bias of ciphers and linear bias of round function F and S-box respectively is given by carrying out strictly mathematical expression of linear bias for ciphers. Next, the upper bounds of linear bias for ciphers are determined by seeking the solution with minimum weight for linear equation group. Using this method the upper bounds of linear bias within 32 rounds are given.

关 键 词：线性分析 线性偏差表达式 Fleistel密码 轮函数 S盒 分组密码 

分 类 号：TN918.2[电子电信—通信与信息系统]