## Linear cryptanalysis of substitution-permutation networks (2003)

Citations: | 4 - 3 self |

### BibTeX

@TECHREPORT{Keliher03linearcryptanalysis,

author = {Liam Keliher},

title = {Linear cryptanalysis of substitution-permutation networks},

institution = {},

year = {2003}

}

### OpenURL

### Abstract

The subject of this thesis is linear cryptanalysis of substitution-permutation networks (SPNs). We focus on the rigorous form of linear cryptanalysis, which requires the concept of linear hulls. First, we consider SPNs in which the s-boxes are selected independently and uni-formly from the set of all bijective n × n s-boxes. We derive an expression for the expected linear probability values of such an SPN, and give evidence that this ex-pression converges to the corresponding value for the true random cipher. This adds quantitative support to the claim that the SPN structure is a good approximation to the true random cipher. We conjecture that this convergence holds for a large class of SPNs. In addition, we derive a lower bound on the probability that an SPN with ran-domly selected s-boxes is practically secure against linear cryptanalysis after a given number of rounds. For common block sizes, experimental evidence indicates that this probability rapidly approaches 1 with an increasing number of rounds.