A Method to Bound the Number of Active S-Boxes for a Kind of AES-Like Structure. (14th February 2019)

• Record Type: Journal Article
• Authors: Wang, Qian; Jin, Chenhui
• Editors: Liu, Joseph
• Is Part Of: Computer journal. Volume 62:Number 8(2019)
• Page Start: 1121
• Page End: 1131
• Publication Date: 2019-02-14
• Subjects: AES-like structure -- hash function -- differential cryptanalysis -- active S-boxes -- wide-trail strategy -- diffusion-optimal; Computers -- Periodicals; 005.1
• DOI: 10.1093/comjnl/bxz006
• Languages: English
• ISSNs: 0010-4620

Abstract

Abstract: Due to the strong security and high performance of the AES block cipher, many hash functions take AES-like structures as building blocks. To evaluate the security of these AES-like structures against differential cryptanalysis, giving the lower bounds on the number of active S-boxes in a differential trail, is an important perspective. However, the original 'wide-trail strategy' for AES becomes less effective to get tight bounds for these AES-like structures, because of the different state dimensions (M × M 2, instead of M × M ) and different round functions from AES. In this paper, we focus on a kind of AES-like structure with state dimensions M × M 2, diffusion-optimal permutations and MixColumns transformations using MDS matrices. Inspired by the 'wide-trail strategy', we propose a theoretical method to count active S-boxes, by which we prove that there are at least r B d ( B d − 1) active S-boxes in any 2 r ( r ≥ 3) rounds of such an AES-like structure, where B d is the differential branch number of the MixColumns transformation and equals to M + 1 . What's more, this lower bound can be achieved by some diffusion layers. As examples, we apply our method to the LANE hash function and 3D block cipher, optimal lower bounds are both got.