A tutorial on linear and differential cryptanalysis

Cryptologia, Jul 2002 by Heys, Howard M

Finally, we note that our presentation of the attacks does not discuss the method for determining the best linear approxmation and differential characteristic. However, this is discussed, for example, in [18].

6 CONCLUSION

In this paper, we have strived to present the fundamental concepts of linear and differential cryptanalysis as applied to a basic cipher. This cipher is a basic Substitution-Permutation Network and is not of a realistic scale to be used as a practical cipher. However, the structure is useful in examining the applicability of the attacks and this example cipher has formed the cornerstone for the explanation of the two attacks.

REFERENCES

1. Biham, E. and A. Shamir. 1991. Differential Cryptanalysis of DES-like Cryptosystems. Journal of Cryptology. 4(1): 3-72.

2. Biham, E. and A. Shamir. 1993. Differential Cryptanalysis of the Data Encryption Standard. New York: Springer-Verlag.

3. Biham, E. 1995. On Matsui's Linear Cryptanalysis. In Advances in Cryptology - EUROCRYPT '94 (Lecture Notes in Computer Science No. 950). New York: Springer-Verlag. 341-355.

4. Biham, E., A. Biryukov, and A. Shamir. 1999. Cryptanalysis of Skipjack Reduced to 31 Rounds Using Impossible Differentials. In Advances in Cryptology - EUROCRYPT '99 (Lecture Notes in Computer Science No. 1592). New York: Springer-Verlag. 12-23.

5. Chabaud, F. and S. Vaudenay. 1995. Links Between Differential and Linear Cryptanalysis. In Advances in Cryptology - EUROCRYPT '94 (Lecture Notes in Computer Science No. 950). New York: Springer-Verlag. 356-365.

6. Daemen, J. and V. Rjimen. 2002. The Design of Rijndael: AES-The Advanced Encryption Standard. New York: Springer-Verlag.

7. De Win, E., A. Bosselaers, B. Preneel, J. Daemen, and V. Rijmen. 1996. The Cipher SHARK. In Fast Software Encryption (Lecture Notes in Computer Science No. 1039). New York: Springer-Verlag. 99-112.

8. Feistel, H. 1973. Cryptography and Computer Privacy. Scientific American. 228(5): 15-23.

9. Hellman, M. and S. Langford. 1994.' Differential-Linear Cryptanalysis. In Advances in Cryptology - CRYPTO '94 (Lecture Notes in Computer Science No. 839). New York: Springer-Verlag. 7-25.

10. Heys, H. M. and S. E. Tavares. 1996. Substitution-Permutation Networks Resistant to Differential and Linear Cryptanalysis. Journal of Cryptology. 9(1): 1-19.

11. Keliher, L. Unpublished. Linear and Differential Cryptanalysis of SPNs. 12. Knudsen, L. R. 1995. Truncated and Higher Order Differentials. In Fast

Software Encryption (Lecture Notes in Computer Science No. 1008). New York: Springer-Verlag. 196-211.

13. Knudsen, L. and M. J. B. Robshaw. 1996. Nonlinear Approximations in Linear Cryptanalysis. In Advances in Cryptology - EUROCRYPT '96 (Lecture Notes in Computer Science No. 1070). New York: Springer-Verlag. 224-236.

14. Knudsen, L. 1998. Block Ciphers: A Survey. In State of the Art in Applied Cryptography: Course on Computer Security and Industrial Cryptography (Lecture Notes in Computer Science No. 1528). New York: Springer-Verlag. 18-48.

15. Lai, X., J. L. Massey, and S. Murphy. 1991. Markov Ciphers and Differential Cryptanalysis. In Advances in Cryptology - EUROCRYPT '91 (Lecture Notes in Computer Science No. 547). New York: Springer-Verlag. 17-38.