Towards a general construction of recursive MDS diffusion layers
详细信息 查看全文
- 作者：Kishan Chand Gupta ; Sumit Kumar Pandey…
- 关键词：Diffusion layer ; MDS codes ; Recursive MDS matrices ; Companion matrices ; Cyclic codes ; BCH codes ; Gabidulin codes
- 刊名：Designs, Codes and Cryptography
- 出版年：2017
- 出版时间：January 2017
- 年：2017
- 卷：82
- 期：1-2
- 页码：179-195
- 全文大小：
- 刊物类别：Mathematics and Statistics
- 刊物主题：Combinatorics; Coding and Information Theory; Data Structures, Cryptology and Information Theory; Data Encryption; Discrete Mathematics in Computer Science; Information and Communication, Circuits;
- 出版者：Springer US
- ISSN：1573-7586
- 卷排序：82
文摘
MDS matrices are of great importance in the design of block ciphers and hash functions. MDS matrices are not sparse and have a large description and thus induce costly implementation in software/hardware. To overcome this problem, in particular for applications in light-weight cryptography, it was proposed by Guo et al. to use recursive MDS matrices. A recursive MDS matrix is an MDS matrix which can be expressed as a power of some companion matrix. Following the work of Guo et al., some ad-hoc search techniques are proposed to find recursive MDS matrices which are suitable for hardware/software implementation. In another direction, coding theoretic techniques are used to directly construct recursive MDS matrices: Berger technique uses Gabidulin codes and Augot et al. technique uses shortened BCH codes. In this paper, we first characterize the polynomials that yield recursive MDS matrices in a more general setting. Based on this we provide three methods for obtaining such polynomials. Moreover, the recursive MDS matrices obtained using shortened BCH codes can also be obtained with our first method. In fact we get a larger set of polynomials than the method which uses shortened BCH codes. Our other methods appear similar to the method which uses Gabidulin codes. We get a new infinite class of recursive MDS matrices from one of the proposed methods. Although we propose three methods for the direct construction of recursive MDS matrices, our characterization results pave the way for new direct constructions.