<p>The study presents practical-time decompositions against Generalized Lai–Massey (GLM), Unbalanced-MISTY (U-M), and Unbalanced-Bridge (U-B) structures, which were designed to construct efficient S-boxes with smaller S-boxes. We propose one classification technique, which utilizes the relations among different sets to reduce the time complexity drastically in the decompositions of the S-boxes with U-M and U-B structures, respectively. Moreover, the equivalent structures of the three structures are obtained. For a 2<i>n</i>-bit S-box with the GLM structure, the time complexity of our decomposition algorithm is approximately <InlineEquation ID="IEq1"> <InlineMediaObject> <ImageObject Color="BlackWhite" FileRef="11227_2025_7375_Article_IEq1.gif" Format="GIF" Height="16" Rendition="HTML" Resolution="72" Type="Linedraw" Width="32" /> </InlineMediaObject> <EquationSource Format="TEX">\(2^{n+2}\)</EquationSource> <EquationSource Format="MATHML"><math> <msup> <mn>2</mn> <mrow> <mi>n</mi> <mo>+</mo> <mn>2</mn> </mrow> </msup> </math></EquationSource> </InlineEquation> times S-box look-ups. For the 2<i>n</i>-bit S-box with U-M or U-B structure, the time complexity is <InlineEquation ID="IEq2"> <InlineMediaObject> <ImageObject Color="BlackWhite" FileRef="11227_2025_7375_Article_IEq2.gif" Format="GIF" Height="16" Rendition="HTML" Resolution="72" Type="Linedraw" Width="60" /> </InlineMediaObject> <EquationSource Format="TEX">\(17 \cdot 2^{n-1}\)</EquationSource> <EquationSource Format="MATHML"><math> <mrow> <mn>17</mn> <mo>·</mo> <msup> <mn>2</mn> <mrow> <mi>n</mi> <mo>-</mo> <mn>1</mn> </mrow> </msup> </mrow> </math></EquationSource> </InlineEquation> times S-box look-ups, and for a single fixed starting point, there are 24 equivalent structures obtained. All our results were verified by experiments.</p>

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Practical-time decompositions against three kinds of S-boxes with different structures

  • Shiwei Chen,
  • Kaiyuan Wang,
  • Ensheng Chen

摘要

The study presents practical-time decompositions against Generalized Lai–Massey (GLM), Unbalanced-MISTY (U-M), and Unbalanced-Bridge (U-B) structures, which were designed to construct efficient S-boxes with smaller S-boxes. We propose one classification technique, which utilizes the relations among different sets to reduce the time complexity drastically in the decompositions of the S-boxes with U-M and U-B structures, respectively. Moreover, the equivalent structures of the three structures are obtained. For a 2n-bit S-box with the GLM structure, the time complexity of our decomposition algorithm is approximately \(2^{n+2}\) 2 n + 2 times S-box look-ups. For the 2n-bit S-box with U-M or U-B structure, the time complexity is \(17 \cdot 2^{n-1}\) 17 · 2 n - 1 times S-box look-ups, and for a single fixed starting point, there are 24 equivalent structures obtained. All our results were verified by experiments.