《Known-key distinguishers on type-1 Feistel scheme and near-collision attacks on its hashing modes》.pdf

Front．Comput．Sci．，2014，8(3)：513-525 DOI10．1O07／sl1704—014—2412—7 KKnno,)wwnn-keyddliSst一in~uis‘h’ersoonnttyyppe．·IFeeiisstteellsscchhe(meaannd near-collisionattacksonitshashingmodes LeDONG ，一，WenlingWU ，ShuangWU ，JianZOU ， 1 CollegeofMathematicsandInformationScience，Henna NormalUniversity,Xinxina g453007，China 2 InstituteofSoftware，ChineseAcademyofSciences，Beijing100190，China 3 GraduateUniversityofChineseAcademyofSciences，Beijing100149，China ⑥HigherEducationPressandSpringer-VerlagBerlinHeidelberg2014 Abstract W epresentsomeknown—keydistinguishersfora tvpe—lFeistelschemewithapermutationastheroundfunc— 1 Introduction tion．T0bemorespecific．the29．roundkn own—keytruncated differentialdistinguishersraegivenofrhte256一bittype一1 A blockcipherisaveryimportna tprimitiveofcryptography FeistelschemewithanSP(substitution—permutation1round htatkeepingthekeysecretistheprimarysecuritygurana— function by usingthereboundattack，wheretheS-boxes tee． ilehterearesomecryptographyprimitivesthatdonot haveperfectdifferential and linera propertiesand thelin— employasecretkey，suchashashfunctions．Knudsenand era diflusion1ayerhasamaximum brnachnumber．Fortwo Rjjmenproposedhtenotionofaknown-keydistinguisheron 128_bitversions．htedistinguisherscna beappliedon25一 blockciphersin2007 【1]，whereinallsecretkeysraeknown roundstructures．Basedonthesedistinguishers，weconstruct aprioriinhtisscenario．Theypresenteda7．roundkn own．key nera-collisionatatcksonhteseschemeswimMM0 (Matyas— distinguisherofrFeiscelciphersanda7．roundkn own．keyin． Meyer-Oseas)andMP(Miyaguchi—Prenee1)hashingmodes， tegraldistinguisherofrAES．Itiscommonlybelievedhtathte andproposethe26．．roundnad22．．roundnera-collisionatatcks reserachonblockcipherswithknownkeyswillcontributeto ofrtwo256．bitschemesnadtwo128．bitschemes，respec- hashfunctiondesign． tively．W elapplythenera-collisionattackonMAMEandOb-