<p>With the advancement of quantum computing, symmetric cryptography faces new challenges from quantum attacks. These attacks are typically classified into two models: Q1 (classical queries) and Q2 (quantum superposition queries). In this context, we present a comprehensive security analysis of the FBC algorithm considering quantum adversaries with different query capabilities. In the Q2 model, we first design 4-round polynomial-time quantum distinguishers for FBC-F and FBC-KF structures, and then perform <InlineEquation ID="IEq1"> <EquationSource Format="TEX">\(r(r&gt;6)\)</EquationSource> <EquationSource Format="MATHML"><math> <mrow> <mi>r</mi> <mo stretchy="false">(</mo> <mi>r</mi> <mo>&gt;</mo> <mn>6</mn> <mo stretchy="false">)</mo> </mrow> </math></EquationSource> </InlineEquation>-round quantum key-recovery attacks. Our attacks require <InlineEquation ID="IEq2"> <EquationSource Format="TEX">\(O(2^{(2n(r-6)+3n)/2})\)</EquationSource> <EquationSource Format="MATHML"><math> <mrow> <mi>O</mi> <mo stretchy="false">(</mo> <msup> <mn>2</mn> <mrow> <mo stretchy="false">(</mo> <mn>2</mn> <mi>n</mi> <mo stretchy="false">(</mo> <mi>r</mi> <mo>-</mo> <mn>6</mn> <mo stretchy="false">)</mo> <mo>+</mo> <mn>3</mn> <mi>n</mi> <mo stretchy="false">)</mo> <mo stretchy="false">/</mo> <mn>2</mn> </mrow> </msup> <mo stretchy="false">)</mo> </mrow> </math></EquationSource> </InlineEquation> quantum queries, reducing the time complexity by a factor of <InlineEquation ID="IEq3"> <EquationSource Format="TEX">\(2^{4.5n}\)</EquationSource> <EquationSource Format="MATHML"><math> <msup> <mn>2</mn> <mrow> <mn>4.5</mn> <mi>n</mi> </mrow> </msup> </math></EquationSource> </InlineEquation> compared with quantum brute-force search, where <i>n</i> denotes the subkey length. Moreover, we give a new 6-round polynomial-time quantum distinguisher for FBC-FK structure. Based on this, we construct an <InlineEquation ID="IEq4"> <EquationSource Format="TEX">\(r(r&gt;6)\)</EquationSource> <EquationSource Format="MATHML"><math> <mrow> <mi>r</mi> <mo stretchy="false">(</mo> <mi>r</mi> <mo>&gt;</mo> <mn>6</mn> <mo stretchy="false">)</mo> </mrow> </math></EquationSource> </InlineEquation>-round quantum key-recovery attack with complexity <InlineEquation ID="IEq5"> <EquationSource Format="TEX">\(O(2^{n(r-6)})\)</EquationSource> <EquationSource Format="MATHML"><math> <mrow> <mi>O</mi> <mo stretchy="false">(</mo> <msup> <mn>2</mn> <mrow> <mi>n</mi> <mo stretchy="false">(</mo> <mi>r</mi> <mo>-</mo> <mn>6</mn> <mo stretchy="false">)</mo> </mrow> </msup> <mo stretchy="false">)</mo> </mrow> </math></EquationSource> </InlineEquation>. Considering an adversary with classical queries and quantum computing capabilities, we demonstrate low-data quantum key-recovery attacks on FBC-KF/FK structures in the Q1 model. These attacks require only a constant number of plaintext-ciphertext pairs, then use the Grover algorithm to search the intermediate states, thereby recovering all keys in <InlineEquation ID="IEq6"> <EquationSource Format="TEX">\(O(2^{n/2})\)</EquationSource> <EquationSource Format="MATHML"><math> <mrow> <mi>O</mi> <mo stretchy="false">(</mo> <msup> <mn>2</mn> <mrow> <mi>n</mi> <mo stretchy="false">/</mo> <mn>2</mn> </mrow> </msup> <mo stretchy="false">)</mo> </mrow> </math></EquationSource> </InlineEquation> time.</p>

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Quantum key-recovery attacks on FBC algorithm

  • Yan-Ying Zhu,
  • Bin-Bin Cai,
  • Fei Gao,
  • Song Lin

摘要

With the advancement of quantum computing, symmetric cryptography faces new challenges from quantum attacks. These attacks are typically classified into two models: Q1 (classical queries) and Q2 (quantum superposition queries). In this context, we present a comprehensive security analysis of the FBC algorithm considering quantum adversaries with different query capabilities. In the Q2 model, we first design 4-round polynomial-time quantum distinguishers for FBC-F and FBC-KF structures, and then perform \(r(r>6)\) r ( r > 6 ) -round quantum key-recovery attacks. Our attacks require \(O(2^{(2n(r-6)+3n)/2})\) O ( 2 ( 2 n ( r - 6 ) + 3 n ) / 2 ) quantum queries, reducing the time complexity by a factor of \(2^{4.5n}\) 2 4.5 n compared with quantum brute-force search, where n denotes the subkey length. Moreover, we give a new 6-round polynomial-time quantum distinguisher for FBC-FK structure. Based on this, we construct an \(r(r>6)\) r ( r > 6 ) -round quantum key-recovery attack with complexity \(O(2^{n(r-6)})\) O ( 2 n ( r - 6 ) ) . Considering an adversary with classical queries and quantum computing capabilities, we demonstrate low-data quantum key-recovery attacks on FBC-KF/FK structures in the Q1 model. These attacks require only a constant number of plaintext-ciphertext pairs, then use the Grover algorithm to search the intermediate states, thereby recovering all keys in \(O(2^{n/2})\) O ( 2 n / 2 ) time.