摘要
该文重新评估了Zodiac算法抗Square攻击的能力。Zodiac算法存在8轮Square区分器,该文首先根据算法的结构特性,给出了Zodiac的4个等价结构,而后利用等价结构得到了两个新的9轮Square区分器。利用新的区分器,对不同轮数的Zodiac算法实施了Square攻击,对12轮,13轮,14轮,15轮和16轮Zodiac的攻击复杂度分别为237.3,262.9,296.1,2137.1和2189.5次加密运算,选择明文数分别为210.3,211,211.6,212.1和212.6。结果表明:完整16轮192bit密钥的Zodiac算法是不抗Square攻击的。
This paper re-evaluates the security of Zodiac against Square attacks.There are 8-round Square distinguishers of Zodiac.In this paper,four equivalent structures of Zodiac are given,based on which two new 9-round distinguishers are proposed.Then by using the 9-round Square distinguishers,Square attacks are applied to 12/13/14/15/16-round Zodiac with time complexities being 237.3,262.9,296.1,2137.1,2189.5,and data complexities being 210.3,211,211.6,212.1,212.6,respectively.Additionally,these attacks show that full 16-round Zodiac-192 is not immune to Square attack.
出处
《电子与信息学报》
EI
CSCD
北大核心
2010年第11期2790-2794,共5页
Journal of Electronics & Information Technology
基金
国家自然科学基金(60803156)
信息安全国家重点实验室开放基金(01-07)资助课题