Quadratic Relation of S-box and its Application to the Linear Attack of Full Round DES (1998)
| Venue: | Advances in Cryptology - Crypto’98, volume 1462 of LNCS |
| Citations: | 14 - 0 self |
BibTeX
@INPROCEEDINGS{Shimoyama98quadraticrelation,
author = {Takeshi Shimoyama and Toshinobu Kaneko},
title = {Quadratic Relation of S-box and its Application to the Linear Attack of Full Round DES},
booktitle = {Advances in Cryptology - Crypto’98, volume 1462 of LNCS},
year = {1998},
pages = {200--211},
publisher = {Springer-Verlag}
}
Bookmark
 |
 |
 |
 |
 |
 |
OpenURL
Abstract
Abstract. In this paper, we derive 7 quadratic relations over GF (2) from the input and output bits of the S-boxes of DES. We apply one of those to an improved linear attack of full round DES. We describe an improved algorithm by combining the non-linear approximation method proposed by Knudsen and Robshaw, and the multiple approximation method proposed by Kaliski and Robshaw. This improvement can reduce the number of required plaintexts and ciphertexts pairs to 25/34 (73.5 %) of those number of pairs 2 43 required in the linear attack by Matsui. 1
Citations
| 129 | Gröbner Bases - Becker, Weispfenning - 1993 |
| 1 | Linear Cryptanalysis by Linear Sieve Method - Takeda, Hamade, et al. - 1998 |
