<p>In recent years, progress in practical applications of multi-party computation (MPC), fully homomorphic encryption (FHE), and zero-knowledge proofs (ZKP) motivates people to explore symmetric-key cryptographic algorithms, as well as corresponding cryptanalysis techniques (such as differential cryptanalysis, linear cryptanalysis), over finite Abelian groups or prime fields <InlineEquation ID="IEq1"> <EquationSource Format="TEX">\({\mathbb {F}}_p\)</EquationSource> <EquationSource Format="MATHML"><math> <msub> <mi mathvariant="double-struck">F</mi> <mi>p</mi> </msub> </math></EquationSource> </InlineEquation> for large <i>p</i>. In this paper, we establish the links between linear cryptanalysis and differential cryptanalysis over general finite Abelian groups. As the first application, we revisit linear cryptanalysis and give general results of linear approximations over arbitrary finite Abelian groups. More precisely, we consider the <i>linearity</i>, which is the maximal non-trivial linear approximation, to characterize the resistance of a function against linear cryptanalysis. This thereby generalizes the work of Pott in 2004 and completes the generalization of Sidelnikov–Chabaud–Vaudenay’s bound from <InlineEquation ID="IEq2"> <EquationSource Format="TEX">\({\mathbb {F}}_2^n\)</EquationSource> <EquationSource Format="MATHML"><math> <msubsup> <mi mathvariant="double-struck">F</mi> <mn>2</mn> <mi>n</mi> </msubsup> </math></EquationSource> </InlineEquation> to finite Abelian groups. As the second application, we give an exact expression for the correlation of differential-linear approximations over arbitrary finite Abelian groups (<InlineEquation ID="IEq3"> <EquationSource Format="TEX">\({\mathbb {F}}_p^n\)</EquationSource> <EquationSource Format="MATHML"><math> <msubsup> <mi mathvariant="double-struck">F</mi> <mi>p</mi> <mi>n</mi> </msubsup> </math></EquationSource> </InlineEquation>) under the sole assumption that the two parts of the cipher are independent of each other. In particular, we completely generalize the differential-linear cryptanalysis from <InlineEquation ID="IEq4"> <EquationSource Format="TEX">\({\mathbb {F}}_2^n\)</EquationSource> <EquationSource Format="MATHML"><math> <msubsup> <mi mathvariant="double-struck">F</mi> <mn>2</mn> <mi>n</mi> </msubsup> </math></EquationSource> </InlineEquation> to arbitrary finite Abelian groups (<InlineEquation ID="IEq5"> <EquationSource Format="TEX">\({\mathbb {F}}_p^n\)</EquationSource> <EquationSource Format="MATHML"><math> <msubsup> <mi mathvariant="double-struck">F</mi> <mi>p</mi> <mi>n</mi> </msubsup> </math></EquationSource> </InlineEquation>).</p>

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Link Between the Differential Cryptanalysis and Linear Approximations over Finite Abelian Groups And Its Applications

  • Zhongfeng Niu,
  • Siwei Sun,
  • Hailun Yan,
  • Qi Wang

摘要

In recent years, progress in practical applications of multi-party computation (MPC), fully homomorphic encryption (FHE), and zero-knowledge proofs (ZKP) motivates people to explore symmetric-key cryptographic algorithms, as well as corresponding cryptanalysis techniques (such as differential cryptanalysis, linear cryptanalysis), over finite Abelian groups or prime fields \({\mathbb {F}}_p\) F p for large p. In this paper, we establish the links between linear cryptanalysis and differential cryptanalysis over general finite Abelian groups. As the first application, we revisit linear cryptanalysis and give general results of linear approximations over arbitrary finite Abelian groups. More precisely, we consider the linearity, which is the maximal non-trivial linear approximation, to characterize the resistance of a function against linear cryptanalysis. This thereby generalizes the work of Pott in 2004 and completes the generalization of Sidelnikov–Chabaud–Vaudenay’s bound from \({\mathbb {F}}_2^n\) F 2 n to finite Abelian groups. As the second application, we give an exact expression for the correlation of differential-linear approximations over arbitrary finite Abelian groups ( \({\mathbb {F}}_p^n\) F p n ) under the sole assumption that the two parts of the cipher are independent of each other. In particular, we completely generalize the differential-linear cryptanalysis from \({\mathbb {F}}_2^n\) F 2 n to arbitrary finite Abelian groups ( \({\mathbb {F}}_p^n\) F p n ).