On Correlation Between the Order of S-boxes and the Strength of DES
On Correlation Between the Order of S-boxes and the Strength of DES
复制标题
DOI：
10.1007/bfb0053451
复制
发表时间：
1994-05
期刊：
影响因子：
--
通讯作者：
M. Matsui
中科院分区：
文献类型：
--
作者：
M. Matsui
本文介绍了一种求DES最佳微分特性和最佳线性表达式的实用算法。它的原理是基于差分密码分析和线性密码分析之间的对偶性，适用于各种分组密码。然后利用这个程序，我们观察了S盒的顺序如何影响DES的强度。我们表明，顺序的S盒是很好的安排对差分密码分析，虽然它不是最好的选择。另一方面，我们的实验结果表明，它是一个非常弱的选择线性密码分析。换句话说，DES可以通过重新排列S盒的顺序来加强。
This paper introduces a practical algorithm for deriving the best differential characteristic and the best linear expression of DES. Its principle is based on a duality between differential cryptanalysis and linear cryptanalysis, and applicable to various block ciphers. Then using this program, we observe how the order of S-boxes affects the strength of DES. We show that the order of the S-boxes is well-arranged against differential cryptanalysis, though it is not the best choice. On the other hand, our experimental results indicate that it is a very weak choice in regard to linear cryptanalysis. In other words, DES can be strengthened by just rearranging the order of the S-boxes.