LBlock算法的相关密钥不可能差分分析.pdfVIP

计算机研究与发展 Researchand 1竺兰!里!!!!里竺竺旦!‘er Development ； ；：：； LBlock算法的相关密钥不可能差分分析 卫宏儒 殷广丽 (北京科技大学数理学院北京 100083) (weihr@ustb．edu．cn) Differential onLBlock Related·KeyImpossible Cryptanalysis Wei Yin and Hongru Guangli (Sf^ooz nd o，M口旃emⅡfics o，Sc把挖cP 100083) P^ysifs，Uni优r5打yn竹d丁_c危九DZogyBP巧i咒g，Beoi规g is AbstractLBlocka block atconstrained lightweightcipher resources，whichwas in aiming proposed ACNS 2011．Itisknownthat14rounddifferentialrulesand15round related—kevdifferentialrules haVe been not onwhichthebestresuhs differentialattack proposedlongago，based usingimpossible onLBlockreachtothemaximumroundof22． To the differentialof anaIyzeimpossible property LBlock withthecharacteristicofthe and schedulestructureofroundfunction， cipher，combining key four1S—round differentiaIrulesareconstructed． thedifferentiaIruIetoextend related—key Then，using the4一round and3一round forward， afterward，22一roundLBlockis 0nthebasisofthe proposed． differentialattack，theS—boxesintheroundfunctionare existingreIated—keyimpossible discussed， andtwokindsof differentialrulesare Basedonthe of related—key applied． techn0109ypartialkey—byte toreducethetime it isshowthattheattackon22一round the