MILP-Aided Bit-Based Division Property for M6 and M8
MILP-Aided Bit-Based Division Property for M6 and M8
复制标题
M6 和 M8 的 MILP 辅助基于位的除法属性
DOI：
10.1166/asl.2018.11111
复制
发表时间：
2018
影响因子：
--
通讯作者：
and Toshinobu Kaneko
中科院分区：
文献类型：
--
作者：
Tadashi Sasaki;Yasutaka Igarashi;and Toshinobu Kaneko
Todo和Morri在FSE 2016上提出了基于位的分割属性。然而，利用基于位的除法属性需要大量的时间和内存复杂性，Xiang等人在ASIACTYPT 2016上已经解决了这个问题。将MILP方法应用于基于除法性质的积分判别符的搜索。本文将MILP方法应用于对称密钥分组密码M6和M8。M6是由日立公司于1997年提出的10轮费斯特尔型密码，块大小为64位。与M6一样，M8也是一个N轮（N > 0）费斯特尔密码，块大小为64位，但M8的每轮函数的结构是由一些密钥决定的。结果首次发现了M6的4轮63阶积分区分符和M8的5轮63阶积分区分符。
Todo and Morri proposed bit-based division property at FSE 2016. However, it takes the huge time and memory complexities in utilizing bit-based division property and it has been solved by Xiang et al. at ASIACTYPT 2016. They applied MILP method to a search of integral distinguisher based on division property. In this paper, we apply the MILP method to the symmetric key block ciphers M6 and M8. M6 is a 10-round Feistel-type cipher with a block size of 64 bits proposed by Hitachi in 1997. Like M6, M8 is an N-round (N > 0) Feistel cipher with a block size of 64 bits, but a structure of each round function of M8 is determined by some keys. As a result, we found the 4-round 63rd-order integral distinguisher of M6 and 5-round 63rd-order integral distinguisher of M8 for the first time.