A Link Between Integrals and Higher‐Order Integrals of SPN Ciphers. Issue 1 (1st February 2013)

• Record Type: Journal Article
• Authors: Li, Ruilin; Sun, Bing; Li, Chao
• Is Part Of: ETRI journal. Volume 35:Issue 1(2013)
• Page Start: 131
• Page End: 141
• Publication Date: 2013-02-01
• Subjects: Cryptanalysis -- block ciphers -- SPN -- AES -- ARIA -- integral -- higher‐order integral; Telecommunication -- Periodicals; Electronics -- Periodicals; Electronics; Telecommunication; Periodicals; Periodicals; 621.38205
• DOI: 10.4218/etrij.13.0111.0624
• Languages: English
• ISSNs: 1225-6463

Abstract

Abstract : Integral cryptanalysis, which is based on the existence of (higher‐order) integral distinguishers, is a powerful cryptographic method that can be used to evaluate the security of modern block ciphers. In this paper, we focus on substitution‐permutation network (SPN) ciphers and propose a criterion to characterize how an r ‐round integral distinguisher can be extended to an ( r +1)‐round higher‐order integral distinguisher. This criterion, which builds a link between integrals and higher‐order integrals of SPN ciphers, is in fact based on the theory of direct decomposition of a linear space defined by the linear mapping of the cipher. It can be directly utilized to unify the procedure for finding 4‐round higher‐order integral distinguishers of AES and ARIA and can be further extended to analyze higher‐order integral distinguishers of various block cipher structures. We hope that the criterion presented in this paper will benefit the cryptanalysts and may thus lead to better cryptanalytic results.