减轮Simeck算法的积分攻击

Integral Attack on Reduced-round Simeck Algorithm

该文对轻量级分组密码算法Simeck在积分攻击下的安全性进行了研究。通过向前解密扩展已有的积分区分器,构造了16轮Simeck48和20轮Simeck64算法的高阶积分区分器,并在新区分器的基础上,利用等价子密钥技术和部分和技术,结合中间相遇策略和密钥扩展算法的性质,实现了24轮Simeck48和29轮Simeck64算法的积分攻击。攻击24轮Simeck48的数据复杂度为2^46,时间复杂度为2^95,存储复杂度为2^82.52;攻击29轮Simeck64的数据复杂度为2^63,时间复杂度为2^127.3,存储复杂度为2^109.02。与Simeck算法已有积分攻击的结果相比,该文对Simeck48和Simeck64积分攻击的轮数分别提高了3轮和5轮。

The security of lightweight block cipher Simeck against integral attack is evaluated in this paper.First,a 16-round and a 20-round high-order integral distinguisher of Simeck48 and Simeck64 are constructed by decrypting the existed integral distinguisher forward.Then,combined with the meet-in-the-middle strategy and subkey relationship,the integral attacks on 24-round Simeck48 and 29-round Simeck64 are first proposed utilizing the equivalent-subkey and partial-sum technologies based on the new integral distinguishers.The data,time and memory complexity of attacking 24-round Simeck48 are 246,295 and 282.52 while the data,time and memory complexity of attacking 29-round Simeck64 are 263,2127.3 and 2109.02.These new attacks improve greatly the results of the previous integral attack on Simeck.Compared with the known results of the integral attack on Simeck,the number of rounds of the integral attacks on Simeck48 and Simeck64 is increased by 3-round and 5-round,respectively.