Improved Impossible Differential Attacks on Large-Block Rijndael
详细信息 查看全文
- 作者：Qingju Wang (19) (20)
Dawu Gu (19)
Vincent Rijmen (20)
Ya Liu (19)
Jiazhe Chen (21)
Andrey Bogdanov (22) - 关键词：block cipher ; impossible differential attack ; Rijndael ; large block
- 刊名：Lecture Notes in Computer Science
- 出版年：2013
- 出版时间：2013
- 年：2013
- 卷：7839
- 期：1
- 页码：141-155
- 全文大小：254KB
- 参考文献：1. Bahrak, B., Aref, M.R.: A Novel Impossible Differential Cryptanalysis of AES. In: Proceedings of WEWoRC (2007)
2. Barreto, P.S.L.M., Nikov, V., Nikova, S., Rijmen, V., Tischhauser, E.: Whirlwind: a new cryptographic hash function. Des. Codes Cryptography聽56(2-3), 141鈥?62 (2010) CrossRef
3. Biham, E., Biryukov, A., Shamir, A.: Cryptanalysis of Skipjack Reduced to 31 Rounds Using Impossible Differentials. In: Stern, J. (ed.) EUROCRYPT 1999. LNCS, vol.聽1592, pp. 12鈥?3. Springer, Heidelberg (1999) CrossRef
4. Biham, E., Dunkelman, O., Keller, N.: Related-Key Impossible Differential Attacks on 8-Round AES-192. In: Pointcheval, D. (ed.) CT-RSA 2006. LNCS, vol.聽3860, pp. 21鈥?3. Springer, Heidelberg (2006) CrossRef
5. Biryukov, A.: The Boomerang Attack on 5 and 6-Round Reduced AES. In: Dobbertin, H., Rijmen, V., Sowa, A. (eds.) AES 2005. LNCS, vol.聽3373, pp. 11鈥?5. Springer, Heidelberg (2005) CrossRef
6. Biryukov, A., Khovratovich, D.: Related-Key Cryptanalysis of the Full AES-192 and AES-256. In: Matsui, M. (ed.) ASIACRYPT 2009. LNCS, vol.聽5912, pp. 1鈥?8. Springer, Heidelberg (2009) CrossRef
7. Biryukov, A., Khovratovich, D., Nikoli膰, I.: Distinguisher and Related-Key Attack on the Full AES-256. In: Halevi, S. (ed.) CRYPTO 2009. LNCS, vol.聽5677, pp. 231鈥?49. Springer, Heidelberg (2009) CrossRef
8. Borst, J., Knudsen, L.R., Rijmen, V.: Two attacks on reduced idea. In: Fumy, W. (ed.) EUROCRYPT 1997. LNCS, vol.聽1233, pp. 1鈥?3. Springer, Heidelberg (1997) CrossRef
9. Daemen, J., Knudsen, L.R., Rijmen, V.: The Block Cipher Square. In: Biham, E. (ed.) FSE 1997. LNCS, vol.聽1267, pp. 149鈥?65. Springer, Heidelberg (1997) CrossRef
10. Daemen, J., Rijmen, V.: AES Proposal: Rijndael. In: 1st AES Conference, California, USA (1998)
11. Daemen, J., Rijmen, V.: The Design of Rijndael: AES - The Advanced Encryption Standard. Springer (2002)
12. Demirci, H., Sel莽uk, A.A.: A Meet-in-the-Middle Attack on 8-Round AES. In: Nyberg, K. (ed.) FSE 2008. LNCS, vol.聽5086, pp. 116鈥?26. Springer, Heidelberg (2008) CrossRef
13. Ferguson, N., Kelsey, J., Lucks, S., Schneier, B., Stay, M., Wagner, D., Whiting, D.: Improved Cryptanalysis of Rijndael. In: Schneier, B. (ed.) FSE 2000. LNCS, vol.聽1978, pp. 213鈥?30. Springer, Heidelberg (2001) CrossRef
14. FIPS 197: Advanced Encryption Standard. Federal Information Processing Standards Publication 197, U.S. Department of Commerce/N.I.S.T (2001)
15. Galice, S., Minier, M.: Improving Integral Attacks Against Rijndael-256 Up to 9 Rounds. In: Vaudenay, S. (ed.) AFRICACRYPT 2008. LNCS, vol.聽5023, pp. 1鈥?5. Springer, Heidelberg (2008) CrossRef
16. Gauravaram, P., Knudsen, L.R., Matusiewicz, K., Mendel, F., Rechberger, C., Schl盲ffer, M., Thomsen, S.S.: Gr酶stl - a SHA-3 candidate. Submission to NIST (2008), http://www.groestl.info
17. Gilbert, H., Minier, M.: A Collision Attack on 7 Rounds of Rijndael. In: AES Candidate Conference, pp. 230鈥?41 (2000)
18. Nakahara Jr., J., de Freitas, D.S., Phan, R.C.-W.: New Multiset Attacks on Rijndael with Large Blocks. In: Dawson, E., Vaudenay, S. (eds.) Mycrypt 2005. LNCS, vol.聽3715, pp. 277鈥?95. Springer, Heidelberg (2005) CrossRef
19. Nakahara Jr., J., Pav茫o, I.C.: Impossible-Differential Attacks on Large-Block Rijndael. In: Garay, J.A., Lenstra, A.K., Mambo, M., Peralta, R. (eds.) ISC 2007. LNCS, vol.聽4779, pp. 104鈥?17. Springer, Heidelberg (2007) CrossRef
20. Kim, J., Hong, S., Preneel, B.: Related-Key Rectangle Attacks on Reduced AES-192 and AES-256. In: Biryukov, A. (ed.) FSE 2007. LNCS, vol.聽4593, pp. 225鈥?41. Springer, Heidelberg (2007) CrossRef
21. Li, Y., Wu, W.: Improved Integral Attacks on Rijndael. Journal of Information Science and Engineering聽27(6), 2031鈥?045 (2011)
22. Lu, J., Dunkelman, O., Keller, N., Kim, J.: New Impossible Differential Attacks on AES. In: Chowdhury, D.R., Rijmen, V., Das, A. (eds.) INDOCRYPT 2008. LNCS, vol.聽5365, pp. 279鈥?93. Springer, Heidelberg (2008) CrossRef
23. Lucks, S.: Attacking Seven Rounds of Rijndael under 192-bit and 256-bit Keys. In: AES Candidate Conference, pp. 215鈥?29 (2000)
24. Phan, R.C.W.: Impossible differential cryptanalysis of 7-round Advanced Encryption Standard (AES). Inf. Process. Lett.聽91(1), 33鈥?8 (2004) CrossRef
25. Zhang, L., Wu, W., Park, J.H., Koo, B.W., Yeom, Y.: Improved Impossible Differential Attacks on Large-Block Rijndael. In: Wu, T.-C., Lei, C.-L., Rijmen, V., Lee, D.-T. (eds.) ISC 2008. LNCS, vol.聽5222, pp. 298鈥?15. Springer, Heidelberg (2008) CrossRef
26. Zhang, W., Wu, W., Feng, D.: New Results on Impossible Differential Cryptanalysis of Reduced AES. In: Nam, K.-H., Rhee, G. (eds.) ICISC 2007. LNCS, vol.聽4817, pp. 239鈥?50. Springer, Heidelberg (2007) CrossRef
27. Zhang, W., Wu, W., Zhang, L., Feng, D.: Improved Related-Key Impossible Differential Attacks on Reduced-Round AES-192. In: Biham, E., Youssef, A.M. (eds.) SAC 2006. LNCS, vol.聽4356, pp. 15鈥?7. Springer, Heidelberg (2007) CrossRef
28. Zhang, W., Zhang, L., Wu, W., Feng, D.: Related-Key Differential-Linear Attacks on Reduced AES-192. In: Srinathan, K., Rangan, C.P., Yung, M. (eds.) INDOCRYPT 2007. LNCS, vol.聽4859, pp. 73鈥?5. Springer, Heidelberg (2007) CrossRef - 作者单位：Qingju Wang (19) (20)
Dawu Gu (19)
Vincent Rijmen (20)
Ya Liu (19)
Jiazhe Chen (21)
Andrey Bogdanov (22)
19. Department of Computer Science and Engineering, Shanghai聽Jiao聽Tong聽University, Shanghai, 200240, China
20. ESAT/COSIC and iMinds, KU Leuven, Belgium
21. Key Laboratory of Cryptologic Technology and Information Security, Ministry of Education, School of Mathematics, Shandong University, Jinan, 250100, China
22. Department of Mathematics, Technical University of Denmark, Denmark - ISSN：1611-3349
文摘
In this paper, we present more powerful 6-round impossible differentials for large-block Rijndael-224 and Rijndael-256 than the ones used by Zhang et al. in ISC 2008. Using those, we can improve the previous impossible differential cryptanalysis of both 9-round Rijndael-224 and Rijndael-256. The improvement can lead to 10-round attack on Rijndael-256 as well. With 2198.1 chosen plaintexts, an attack is demonstrated on 9-round Rijndael-224 with 2195.2 encryptions and 2140.4 bytes memory. Increasing the data complexity to 2216 plaintexts, the time complexity can be reduced to 2130 encryptions and the memory requirements to 293.6 bytes. For 9-round Rijndael-256, we provide an attack requiring 2229.3 chosen plaintexts, 2194 encryptions, and 2139.6 bytes memory. Alternatively, with 2245.3 plaintexts, an attack with a reduced time of 2127.1 encryptions and a memory complexity of 290.9 bytes can be mounted. With 2244.2 chosen plaintexts, we can attack 10-round Rijndael-256 with 2253.9 encryptions and 2186.8 bytes of memory.