| 摘要: |
| 积分分析是一种针对分组密码十分有效的分析方法，其通常利用密文某些位置的零和性质构造积分区分器.基于高阶差分理论，可通过研究密文与明文之间多项式的代数次数来确定密文某些位置是否平衡.从传统的积分分析出发，首次考虑常数对多项式首项系数的影响，提出了概率积分分析方法，并将其应用于PUFFIN算法的安全性分析.针对PUFFIN算法，构造了7轮概率积分区分器，比已有最好的积分区分器轮数长1轮.进一步，利用构造的概率积分区分器，对9轮PUFFIN算法进行密钥恢复攻击.该攻击可恢复92比特轮密钥，攻击的数据复杂度为224.8个选择明文，时间复杂度为235.48次9轮算法加密，存储复杂度为220个存储单元. |
| 关键词: 积分分析 高阶差分分析 概率积分 PUFFIN算法 |
| DOI：10.13328/j.cnki.jos.005972 |
| 分类号:TP309 |
| 基金项目:国家自然科学基金（61672530，61702537，61772545） |
|
| Probability Integral Cryptanalysis and Its Application on PUFFIN |
|
SHANG Fang-Zhou, SUN Bing, LIU Guo-Qiang, LI Chao
|
|
College of Liberal Arts and Sciences, National University of Defense Technology, Changsha 410073, China
|
| Abstract: |
| Integral cryptanalysis is an effective method of block cipher analysis, and the integral distinguisher is usually constructed using a zero-sum property of some positions in the ciphertext. Based on the theorem of higher-order differential attack, the order of plaintexts can be exploited, to determine if some positions of the ciphertext are balanced. Inspired by the conventional integral cryptanalysis, the influence of constant on the leading-coefficient of polynomial is considered and the construction of probability integral distinguisher as well as the attack method are proposed in this study. When applied to PUFFIN, a 7-round probability integral distinguisher is constructed and used to mount a 9-round attack, and this attack can recover 92-bit round key. The data/time complexity is 224.8 chosen plaintexts, and 235.48 9 round encryptions, and the space complexity is 220. |
| Key words: integral cryptanalysis higher-order differential attack probability integral cryptanalysis PUFFIN |
