LiCi算法的基于比特积分攻击

doi:10.19678/j.issn.1000-3428.0055499

计算机工程 ›› 2020, Vol. 46 ›› Issue (7): 136-142. doi: 10.19678/j.issn.1000-3428.0055499

LiCi算法的基于比特积分攻击

信文倩, 孙兵, 李超

国防科技大学文理学院, 长沙 410073

收稿日期:2019-07-16 修回日期:2019-08-20 发布日期:2019-08-21
作者简介:信文倩(1995-),女,硕士研究生,主研方向为分组密码分析;孙兵,副教授、博士;李超,教授、博士、博士生导师。
基金资助:
国家自然科学基金"结构密码分析的原理及应用研究"（61772545）；国家自然科学基金"分组密码算法的安全性分析"（61672530）。

Bit-based Integral Attack on LiCi Algorithm

XIN Wenqian, SUN Bing, LI Chao

College of Liberal Arts and Sciences, National University of Defense Technology, Changsha 410073, China

Received:2019-07-16 Revised:2019-08-20 Published:2019-08-21

摘要/Abstract

摘要： 为分析目前LiCi算法抵抗积分攻击的能力，利用基于比特的可分性质，结合MILP搜索工具对LiCi算法的积分区分器进行搜索。搜索得到最长轮数积分区分器为12轮积分区分器，利用12轮积分区分器对LiCi算法进行13轮积分攻击。该攻击能够恢复17比特密钥信息，攻击的数据复杂度约为2⁶³，时间复杂度约为2¹⁰⁰次16轮加密，存储复杂度约为2⁴¹。为了得到更长轮数的攻击结果，利用10轮积分区分器向后攻击6轮，对LiCi算法进行16轮积分攻击，攻击数据复杂度约为2^63.6，时间复杂度约为2¹⁷³次16轮加密，存储复杂度约为2¹¹⁹。积分攻击实验结果表明，13轮LiCi算法不能抵抗积分攻击。

关键词: 轻量级分组密码算法, LiCi算法, 可分性质, 混合整数线性规划, 积分攻击

Abstract: To analyze the current ability of LiCi algorithm to resist integral attacks,this paper uses the bit-based division property and the MILP search tool to search for the integral distinguisher of the LiCi algorithm.The obtained longest round of integral distinguisher is 12-round,and is used to perform 13 rounds of integral attacks that can recover 17-bit key information on the LiCi algorithm.The data complexity of the attack is about 2⁶³,the time complexity is about 2¹⁰⁰ times of 16-round encryption,and the storage complexity is about 2⁴¹.In order to obtain a longer round of attack results,a 10-round integral distinguisher is used for 6-round backward attacks,and a 16-round integral attack is performed on the LiCi algorithm.The data complexity of the attack is about 2^63.6,the time complexity is about 2¹⁷³ times of 16-round encryption,and the storage complexity is about 2¹¹⁹.Experimental results of integral attacks show that the 13-round LiCi algorithm cannot resist integral attacks.

Key words: lightweight block cipher algorithm, LiCi algorithm, division property, Mixed Integer Linear(MIL) programming, integral attack

中图分类号:

TP393

信文倩, 孙兵, 李超. LiCi算法的基于比特积分攻击[J]. 计算机工程, 2020, 46(7): 136-142.

XIN Wenqian, SUN Bing, LI Chao. Bit-based Integral Attack on LiCi Algorithm[J]. Computer Engineering, 2020, 46(7): 136-142.

https://www.ecice06.com/CN/Y2020/V46/I7/136

参考文献

[1] GUO J,PEYRIN T,POSCHMANN A,et al.The LED block cipher[C]//Proceedings of International Workshop on Cryptographic Hardware and Embedded Systems.Berlin,Germany:Springer,2011:326-341.
[2] WU Weiling,ZHANG Lei.LBlock:a lightweight block cipher[C]//Proceedings of International Conference on Applied Cryptography and Network Security.Berlin,Germany:Springer,2011:327-344.
[3] KNUDSEN L R,LEANDER G.PRESENT-block cipher[C]//Proceedings of International Workshop on Cryptographic Hardware and Embedded Systems.Berlin,Germany:Springer,2011:39-59.
[4] HONG D,SUNG J,HONG S,et al.HIGHT:a new block cipher suitable for low-resource device[C]//Proceedings of International Workshop on Cryptographic Hardware and Embedded Systems.Berlin,Germany:Springer,2006:46-59.
[5] BEAULIEU R,SHORS D,SMITH J,et al.The SIMON and SPECK lightweight block ciphers[C]//Proceedings of the 52nd Annual Design Automation Conference.New York,USA:ACM Press,2015:1-6.
[6] PATIL J,BANSOD G,KANT K S.LiCi:a new ultra-lightweight block cipher[C]//Proceedings of 2017 International Conference on Emerging Trends & Innovation in ICT.Washington D.C.,USA:IEEE Press,2017:40-45.
[7] WEI Yongzhuang,SHI Jiali,LI Lingchen.Impossible differential cryptanalysis of LiCi block cipher[J].Journal of Electronics & Information Technology,2019,41(7):1610-1617.(in Chinese)韦永壮,史佳利,李灵琛.LiCi分组密码算法的不可能差分分析[J].电子与信息学报,2019,41(7):1610-1617.
[8] KNUDSEN L,WAGNER D.Integral cryptanalysis[C]//Proceedings of Fast Software Encryption.Berlin,Germany:Springer,2002:112-127.
[9] BIHAM E,SHAMIR A.Differential cryptanalysis of DES-like cryptosystems[J].Journal of Cryptology,1991,4(1):3-72.
[10] MATSUI M.Linear cryptanalysis method for DES cipher[C]//Proceedings of EUROCRYPT'93.Berlin,Germany:Springer,1993:386-397.
[11] COURTOIS N T,MEIER W.Algebraic attacks on stream ciphers with linear feedback[C]//Proceedings of Lecture Notes in Computer Science.Berlin,Germany:Springer,2003:345-359.
[12] ZHAO Xinjie,WANG Tao,GUO Shize.An improved differential fault analysis on Camellia[J].Chinese Journal of Computers,2011,34(4):613-627.(in Chinese)赵新杰,王韬,郭世泽.一种针对Camellia的改进差分故障分析[J].计算机学报,2011,34(4):613-627.
[13] HUANG Changyang,WANG Tao,WANG Xiaohan,et al.Algebraic fault attack against SIMECK cipher based on optimized fault location[J].Computer Engineering,2019,45(8):7-13,21.(in Chinese)黄长阳,王韬,王晓晗,等.基于优化故障定位的SIMECK密码代数故障攻击[J].计算机工程,2019,45(8):7-13,21.
[14] SHEN Yu,LI Wei,GU Dawu,et al.Integral fault analysis of the ARIA cipher[J].Journal on Communications,2019,40(2):164-173.(in Chinese)沈煜,李玮,谷大武,等.ARIA密码的积分故障分析[J].通信学报,2019,40(2):164-173.
[15] DAEMEN J,RIJMEN V.The design of rijndael[M].New York,USA:ACM Press,2002:634-639.
[16] AOKI K,ICHIKAWA T,KANDA M,et al.Camellia:a 128-bit block cipher suitable for multiple platforms-design and analysis[C]//Proceedings of International Conference on Selected Areas in Cryptography.Berlin,Germany:Springer,2001:39-56.
[17] JUNOD P,VAUDENAY S.FOX:a new family of block ciphers[C]//Proceedings of International Workshop on Selected Areas in Cryptography.Berlin,Germany:Springer,2004:114-129.
[18] BORGHOFF J L,CANTEAUT A N,GÜNEYSU T,et al.PRINCE-A low-latency block cipher for pervasive computing applications[C]//Proceedings of the 18th International Conference on the Theory and Application of Cryptology and Information Security.Berlin,Germany:Springer,2012:208-225.
[19] TODO Y.Structural evaluation by generalized integral property[C]//Proceedings of EUROCRYPT'15.Berlin,Germany:Springer,2015:287-314.
[20] TODO Y.Integral cryptanalysis on full MISTY1[J].Journal of Cryptology,2015,30:920-959.
[21] XIANG Zejun,ZHANG Wentao,BAO Zhenzhen,et al.Applying MILP method to searching integral distinguishers based on division property for 6 lightweight block ciphers[C]//Proceedings of ASIACRYPT'16.Berlin,Germany:Springer,2016:648-678.
[22] YANG G Q,ZHU B,SUDER V,et al.The simeck family of lightweight block ciphers[C]//Proceedings of International Workshop on Cryptographic Hardware and Embedded Systems.Berlin,Germany:Springer,2015:307-329.
[23] CHEN Qin,CHEN Wei,ZHOU Lv.An algorithm of calculating boolean function formers[J].Computer Engineering and Application,2002,38(8):87-88.(in Chinese)陈勤,陈伟,周律.布尔函数表达式的求解算法[J].计算机工程与应用,2002,38(8):87-88.
[24] TODO Y,MORⅡ M.Bit-based division property and application to simon family[C]//Proceedings of the 23rd International Conference on Fast Software Encryption.Berlin,Germany:Springer,2016:357-377.
[25] FERGUSON N,KELSEY J,LUCKS S,et al.Improved cryptanalysis of rijndael[C]//Proceedings of International Workshop on Fast Software Encryption.Berlin,Germany:Springer,2001:213-230.

选择文件类型/文献管理软件名称

选择包含的内容

LiCi算法的基于比特积分攻击

Bit-based Integral Attack on LiCi Algorithm

RichHTML

PDF

可视化

被引次数

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 4

编辑推荐

Metrics

本文评价

[1]	王超, 陈怀凤. Midori64分组密码算法的积分攻击[J]. 计算机工程, 2021, 47(5): 117-123.
[2]	刘尧, 宋元斌, 李云祥. 融入逻辑关系的项目调度遗传算法[J]. 计算机工程, 2020, 46(1): 279-285.
[3]	苑乐天,李国峰. 基于业务优先级划分的虚拟网可靠性映射算法[J]. 计算机工程, 2019, 45(2): 76-81.
[4]	李靖,乔蕊,刘志中. 结合对策论与多目标MILP的Web服务组合调度问题求解[J]. 计算机工程, 2016, 42(1): 11-17.

模态框（Modal）标题

选择文件类型/文献管理软件名称

选择包含的内容

LiCi算法的基于比特积分攻击

Bit-based Integral Attack on LiCi Algorithm

RichHTML

PDF

可视化

被引次数

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 4

编辑推荐

Metrics

本文评价