Iterative Characteristics of DES and s²-DES
Iterative Characteristics of DES and s²-DES
复制标题
DOI：
10.1007/3-540-48071-4_35
复制
发表时间：
1992-08
期刊：
影响因子：
--
通讯作者：
L. Knudsen
中科院分区：
文献类型：
--
作者：
L. Knudsen
在本文中，我们证明了Biham和Shamir在对DES的差分攻击中使用的特征类型实际上是我们可以找到的DES的最佳特征。此外，我们证明了Kim [6]提出的构造DES类S盒的标准不足以确保抵抗差分攻击。我们展示了几个很好的迭代特性，这些S盒用于差分攻击。最后，我们研究了Biham和Shamir在[3]中使用的两个特征的概率。我们发现，对于某些密钥，我们无法得到攻击中使用的概率。我们建议在DES攻击中使用5个特征而不是2个。
In this paper we show that we are close at the proof that the type of characteristics used by Biham and Shamir in their differential attack on DES [3] are in fact the best characteristics we can find for DES. Furthermore we show that the criteria for the construction of DES-like S-boxes proposed by Kim [6] are insufficient to assure resistance against differential attacks. We show several good iterative characteristics for these S-boxes to be used in differential attacks. Finally we examine the probabilities of the two characteristics used by Biham and Shamir in [3]. We found that for some keys we do not get the probabilities used in the attack. We suggest the use of 5 characteristics instead of two in the attack on DES.