减轮PRINCE的混合差分分析

Mixture Differential Cryptanalysis on Round-Reduced PRINCE

PRINCE是一个轻量级分组密码算法,具有低能耗、低延迟的特点,适用于RFID和智能卡等设备的通信加密。混合差分分析是一种新型密码分析技术,成功应用于AES的4轮区分攻击和5轮密钥恢复攻击。首先给出两种攻击模式下4轮PRINCE的混合差分区分攻击,在适应性选择明文模式下,攻击的数据复杂度为2个选择密文和2个适应性选择明文;在选择明文模式下,攻击的复杂度为29。利用4轮混合差分区分器,对5轮PRINCEcore进行了密钥恢复攻击,数据复杂度为214,计算复杂度为223.68,存储复杂度为28。

PRINCE is a lightweight block cipher proposed by Borghoff et al.in ASIACRYPT 2012.It is characterized by low power consumption and low latency and is suitable for communication encryption of RFID and Smart Card.Mixture differential cryptanalysis is a new type of cryptanalysis technology proposed by Grassi in 2017,successfully applied to distinguish four-round AES from random permutation and to get key recovery attack on five-round AES.This paper gives the mixture differential distinguisher on 4-round PRINCE under two kinds of mode.Under the mode of adaptively chosen plaintext and chosen ciphertext,the data complexity to distinguish 4-round PRINCE is 2 chosen ciphertexts and 2 adaptively chosen plaintexts,while under the mode of chosen plaintext,the complexity to distinguish 4-round PRINCE is 29.Using the mixture differential distinguisher on 4-round PRINCE,we get key recovery attack on PRINCEcore with data complexity 214,time complexity 223.68 and memory complexity 28.