Practical Security against Differential Cryptanalysis for Extended Feistel Network
نویسندگان
چکیده
Immunity against differential cryptanalysis is an important measure in designing symmetric ciphers. Practical security is a measure to evaluate this immunity by estimating the minimum number of differential active s-boxes. A cipher with more sboxes is said to have better immunity against differential cryptanalysis. In this paper, we evaluate the immunity of three types of Extended Feistel Network (EFN) with Substitution-Permutation (SP) round function and compare it with a balanced Feistel Network (FN). Weight-Based Representation (WBR) of sub-blocks is employed in estimating the minimum number of s-boxes of these cipher structures. The result shows that EFN Type-II and EFN Type-III have better immunity to differential cryptanalysis than a balanced FN. This is due to a difference cancellation that occurs more often in a balanced FN.
منابع مشابه
Upper Bounds of Maximum Values of Average Differential and Linear Characteristic Probabilities of Feistel Cipher with Adder Modulo
The paper discusses the Feistel cipher with a block size of n = 2m, where the addition of a round key and a part of an incoming massage in each round is carried out modulo 2m. In order to evaluate the security of such a cipher against differential and linear cryptanalyses, the new parameters of cipher s-boxes are introduced. The upper bounds of maximum average differential and linear probabilit...
متن کاملToward Provable Security Against Differential and Linear Cryptanalysis for Camellia and Related Ciphers
We present a new algorithm that evaluates provable security against differential and linear cryptanalysis for Feistel ciphers with invertible substitution-diffusion (SD)-based round functions. This algorithm computes an upper bound on the maximum expected differential or linear probability (MEDP or MELP) based on the number of rounds. We then apply our algorithm to Camellia (minus FL/FL). Previ...
متن کاملPractical Security against Differential and Linear Cryptanalysis for SMS4-like Cipher
SMS4, a block cipher which employs a special kind of unbalanced Feistel structure, has been accepted as the Chinese National Standard for securing Wireless LANs. This paper investigates the upper bounds of the maximum differential and linear characteristic probabilities of SMS4like cipher, in order to evaluate the practical security against differential and linear cryptanalysis. In the same way...
متن کاملRelationships among Differential, Truncated Differential, Impossible Differential Cryptanalyses against Word-Oriented Block Ciphers like RIJNDAEL, E2
We propose a new method for evaluating the security of block ciphers against di erential cryptanalysis and propose new structures for block ciphers. To this end, we de ne the word-wise Markov (Feistel) cipher and random output-di erential (Feistel) cipher and clarify the relations among the di erential, the truncated di erential and the impossible di erential cryptanalyses of the random output-...
متن کاملSecurity Evaluation against Differential Cryptanalysis for Block Cipher Structures
Estimating immunity against differential and linear cryptanalysis is essential in designing secure block ciphers. A practical measure to achieve it is to find the minimal number of active S-boxes, or a lower bound for this minimal number. In this paper, we provide a general algorithm using integer programming, which not only can estimate a good lower bound of the minimal differential active S-b...
متن کامل