Linearly equivalent S-boxes and the division property
- Division property is a cryptanalysis method that proves to be very efficient on block ciphers. Computer-aided techniques such as MILP have been widely and successfully used to study various cryptanalysis techniques, and it especially led to many new results for the division property. Nonetheless, we claim that the previous techniques do not consider the full search space. We show that even if the previous techniques fail to find a distinguisher based on the division property over a given function, we can potentially find a relevant distinguisher over a linearly equivalent function. We show that the representation of the block cipher heavily influences the propagation of the division property, and exploiting this, we give an algorithm to efficiently search for such linear mappings. As a result, we exhibit a new distinguisher over 10 rounds of RECTANGLE, while the previous best was over 9 rounds, and rule out such a distinguisher over more than 9 rounds of PRESENT. We also give some insight about the construction of an S-box to strengthen a block cipher against our technique. We prove that using an S-box satisfying a certain criterion is optimal in term of resistance against classical division property. Accordingly, we exhibit stronger variants of RECTANGLE and PRESENT, improving the resistance against division property based distinguishers by 2 rounds.
Author: | Baptiste LambinORCiDGND, Patrick DerbezGND, Pierre-Alain FouqueGND |
---|---|
URN: | urn:nbn:de:hbz:294-80614 |
DOI: | https://doi.org/10.1007/s10623-020-00773-4 |
Parent Title (English): | Designs, codes and cryptography |
Publisher: | Springer Nature |
Place of publication: | Berlin |
Document Type: | Article |
Language: | English |
Date of Publication (online): | 2021/05/06 |
Date of first Publication: | 2020/06/23 |
Publishing Institution: | Ruhr-Universität Bochum, Universitätsbibliothek |
Tag: | Cryptanalysis; Division Property; RECTANGLE |
Volume: | 88 |
First Page: | 2207 |
Last Page: | 2231 |
Note: | Dieser Beitrag ist auf Grund des DEAL-Springer-Vertrages frei zugänglich. |
Institutes/Facilities: | Horst Görtz Institut für IT-Sicherheit |
Crypto RUB, Workgroup for Symmetric Cryptography | |
Dewey Decimal Classification: | Allgemeines, Informatik, Informationswissenschaft / Informatik |
open_access (DINI-Set): | open_access |
faculties: | Fakultät für Mathematik |
Licence (English): | Creative Commons - CC BY 4.0 - Attribution 4.0 International |