组合生成器的多线性相关攻击

Multi-Linear Correlation Attack on Combiners

本文对组合生成器提出了一种相关攻击方法 ,这种方法同时利用组合生成器输入与输出之间多个线性关系的信息来恢复密钥 ,我们从理论上证明了该方法可有效的减少攻击所需的数据量 .特别地 ,我们将这种方法用于攻击“蓝牙组合生成器” ,使攻击复杂度得到显著降低 .

A correlation attack method on combiners is presented, which is based on multi-linear correlations between the inputs and outputs of combiners. This method can effectively reduce the amount of data needed in correlation attacks. Specially, we apply this method to bluetooth combiners, and reduce the complexity of attack effectively.