Take a look at the new version of this page: [ beta version ]. Tell us what you think.

ABSTRACT

In this paper we examine a class of product ciphers referred to as substitution-permutation networks. We investigate the resistance of these cryptographic networks to two important attacks: differential cryptanalysis and linear cryptanalysis. In particular, we develop upper bounds on the differential characteristic probability and on the probability of a linear approximation as a function of the number of rounds of substitutions. Further, it is shown that using large S-boxes with good diffusion characteristics and replacing the permutation between rounds by an appropriate linear transformation is effective in improving the cipher security in relation to these two attacks.

REFERENCES

• 1: H. Feistel, '~ryptography and computer privacy," Scientific American, vol. 228, no. 5, pp. 15--23, 1973.
• 2: H. Feistel, W. A. Notz, and J. L. Smith, "Some cryptographic techniques for machine-to-machine dam communications," Proceedings of the IEEE, vol. 63, no. 11, pp. 1545-1554, 1975.
• 3: C. E. Shannon, "Communication theory of secrecy systems," Bell System Technical Journal, vol. 28, pp. 656-715, 1949.
• 4: "National Bureau of Standards - Data Encryption Standard," Federal Information Processing Standard Publication 46, 1977.
• 5: E. Biham and A. Shamir, "Differential cryptanalysis of DES-like cryptosystems," Journal of Cryptology, vol. 4, no. 1, pp. 3-72, 1991.
• 6: Mitsuru Matsui, Linear cryptanalysis method for DES cipher, Workshop on the theory and application of cryptographic techniques on Advances in cryptology, p.386-397, January 1994, Lofthus, Norway
• 7: K. Nybcrg, "On the construction of highly nonlinear lw.xmutations," Advances in Cryptology: Proceedings of EUROCRYPT '92, Springer-Verlag, Berlin, pp. 92- 98, 1992.
• 8: E. Biham and A. Shamir, "Diffexential cryptanalysis of FEAL and N-Hash," Advances in Cryptology: Proceedings of EUROCRYPT '91, Springer-Verlag, Berlin, pp. 1-16, 199 I.
• 9: Eli Biham , Adi Shamir, Differential Cryptanalysis of Snefru, Khafre, REDOC-II, LOKI and Lucifer, Proceedings of the 11th Annual International Cryptology Conference on Advances in Cryptology, p.156-171, August 11-15, 1991
• 10: Eli Biham , Adi Shamir, Differential Cryptanalysis of the Full 16-Round DES, Proceedings of the 12th Annual International Cryptology Conference on Advances in Cryptology, p.487-496, August 16-20, 1992
• 11: Luke O'Connor, On the distribution of characteristics in bijective mappings, Workshop on the theory and application of cryptographic techniques on Advances in cryptology, p.360-370, January 1994, Lofthus, Norway
• 12: E. F. Brickell , J. H. Moore , M. R. Purtill, Structure in the S-boxes of the DES, Proceedings on Advances in cryptology---CRYPTO '86, p.3-8, January 1987, Santa Barbara, California, United States
• 13: Kaisa Nyberg, Differentially uniform mappings for cryptography, Workshop on the theory and application of cryptographic techniques on Advances in cryptology, p.55-64, January 1994, Lofthus, Norway
• 14: Luke James O'Connor, An analysis of product ciphers based on the properties of boolean functions, 1992

INDEX TERMS

Primary Classification:
  E. Data
  E.3 DATA ENCRYPTION

Additional Classification:
  E. Data

General Terms:
Algorithms, Theory, Verification