Practical and provable security against differential and linear cryptanalysis for substitution-permutation networks

Ju Sung Kang, Seokhie Hong, Sangjin Lee, Okyeon Yi, Choonsik Park, Jong In Lim

Research output: Contribution to journalArticle

39 Citations (Scopus)

Abstract

We examine the diffusion layers of some block ciphers referred to as substitution-permutation networks. We investigate the practical and provable security of these diffusion layers against differential and linear cryptanalysis. First, in terms of practical security, we show that the minimum number of differentially active S-boxes and that of linearly active S-boxes are generally not identical and propose some special conditions in which those are identical. We also study the optimal diffusion effect for some diffusion layers according to their constraints. Second, we obtain the results that the consecutive two rounds of SPN structure provide provable security against differential and linear cryptanalysis, i.e., we prove that the probability of each differential (resp. linear hull) of the consecutive two rounds of SPN structure with a maximal diffusion layer is bounded by pn (resp. qn) and that of each differential (resp. linear hull) of the SDS function with a semi-maximal diffusion layer is bounded by pn-1 (resp. qn-1), where p and q are maximum differential and linear probabilities of the substitution layer, respectively.

Original languageEnglish
Pages (from-to)158-167
Number of pages10
JournalETRI Journal
Volume23
Issue number4
Publication statusPublished - 2001 Dec 1

Fingerprint

Substitution reactions

ASJC Scopus subject areas

  • Electrical and Electronic Engineering
  • Computer Networks and Communications

Cite this

Practical and provable security against differential and linear cryptanalysis for substitution-permutation networks. / Kang, Ju Sung; Hong, Seokhie; Lee, Sangjin; Yi, Okyeon; Park, Choonsik; Lim, Jong In.

In: ETRI Journal, Vol. 23, No. 4, 01.12.2001, p. 158-167.

Research output: Contribution to journalArticle

@article{2ae195ab787645a9a3ebb3e44285feb2,
title = "Practical and provable security against differential and linear cryptanalysis for substitution-permutation networks",
abstract = "We examine the diffusion layers of some block ciphers referred to as substitution-permutation networks. We investigate the practical and provable security of these diffusion layers against differential and linear cryptanalysis. First, in terms of practical security, we show that the minimum number of differentially active S-boxes and that of linearly active S-boxes are generally not identical and propose some special conditions in which those are identical. We also study the optimal diffusion effect for some diffusion layers according to their constraints. Second, we obtain the results that the consecutive two rounds of SPN structure provide provable security against differential and linear cryptanalysis, i.e., we prove that the probability of each differential (resp. linear hull) of the consecutive two rounds of SPN structure with a maximal diffusion layer is bounded by pn (resp. qn) and that of each differential (resp. linear hull) of the SDS function with a semi-maximal diffusion layer is bounded by pn-1 (resp. qn-1), where p and q are maximum differential and linear probabilities of the substitution layer, respectively.",
author = "Kang, {Ju Sung} and Seokhie Hong and Sangjin Lee and Okyeon Yi and Choonsik Park and Lim, {Jong In}",
year = "2001",
month = "12",
day = "1",
language = "English",
volume = "23",
pages = "158--167",
journal = "ETRI Journal",
issn = "1225-6463",
publisher = "ETRI",
number = "4",

}

TY - JOUR

T1 - Practical and provable security against differential and linear cryptanalysis for substitution-permutation networks

AU - Kang, Ju Sung

AU - Hong, Seokhie

AU - Lee, Sangjin

AU - Yi, Okyeon

AU - Park, Choonsik

AU - Lim, Jong In

PY - 2001/12/1

Y1 - 2001/12/1

N2 - We examine the diffusion layers of some block ciphers referred to as substitution-permutation networks. We investigate the practical and provable security of these diffusion layers against differential and linear cryptanalysis. First, in terms of practical security, we show that the minimum number of differentially active S-boxes and that of linearly active S-boxes are generally not identical and propose some special conditions in which those are identical. We also study the optimal diffusion effect for some diffusion layers according to their constraints. Second, we obtain the results that the consecutive two rounds of SPN structure provide provable security against differential and linear cryptanalysis, i.e., we prove that the probability of each differential (resp. linear hull) of the consecutive two rounds of SPN structure with a maximal diffusion layer is bounded by pn (resp. qn) and that of each differential (resp. linear hull) of the SDS function with a semi-maximal diffusion layer is bounded by pn-1 (resp. qn-1), where p and q are maximum differential and linear probabilities of the substitution layer, respectively.

AB - We examine the diffusion layers of some block ciphers referred to as substitution-permutation networks. We investigate the practical and provable security of these diffusion layers against differential and linear cryptanalysis. First, in terms of practical security, we show that the minimum number of differentially active S-boxes and that of linearly active S-boxes are generally not identical and propose some special conditions in which those are identical. We also study the optimal diffusion effect for some diffusion layers according to their constraints. Second, we obtain the results that the consecutive two rounds of SPN structure provide provable security against differential and linear cryptanalysis, i.e., we prove that the probability of each differential (resp. linear hull) of the consecutive two rounds of SPN structure with a maximal diffusion layer is bounded by pn (resp. qn) and that of each differential (resp. linear hull) of the SDS function with a semi-maximal diffusion layer is bounded by pn-1 (resp. qn-1), where p and q are maximum differential and linear probabilities of the substitution layer, respectively.

UR - http://www.scopus.com/inward/record.url?scp=0035667545&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=0035667545&partnerID=8YFLogxK

M3 - Article

AN - SCOPUS:0035667545

VL - 23

SP - 158

EP - 167

JO - ETRI Journal

JF - ETRI Journal

SN - 1225-6463

IS - 4

ER -