Topics in Cryptology — CT-RSA 2002
Topics in Cryptology — CT-RSA 2002
复制标题
DOI：
10.1007/3-540-45760-7
复制
发表时间：
2002
期刊：
影响因子：
--
通讯作者：
B. Preneel
中科院分区：
文献类型：
--
作者：
B. Preneel
我们调查了一个已知的明文攻击RC 5的相关性。与Borst、Preneel和Vandewalle提出的对RC 5 -32的线性密码分析算法相比，本文提出的算法适用于更大的轮数。使用26.14r+2.27个明文可以以90%的成功概率破解具有r轮的RC 5 -32。因此，我们的攻击可以用10轮（20个半轮）和263.67个明文以90%的概率打破RC 5 -32。在成功率为30%的情况下，我们的攻击可以使用263.07个明文，用21个半轮破解RC 5 -32。
We investigate a known plaintext attack on RC5 based on correlations. Compared with the best previous known-plaintext attack on RC5-32, a linear cryptanalysis by Borst, Preneel, and Vandewalle, our attack applies to a larger number of rounds. RC5-32 with r rounds can be broken with a success probability of 90% by using 26.14r+2.27plaintexts. Therefore, our attack can break RC5-32 with 10 rounds (20 half-rounds) with 263.67plaintexts with a probability of 90%. With a success probability of 30%, our attack can break RC5-32 with 21 halfrounds by using 263.07plaintexts.