16轮Blow-CAST-Fish的弱密钥攻击

计算机工程与应用 ›› 2011, Vol. 47 ›› Issue (35): 110-112.

16轮Blow-CAST-Fish的弱密钥攻击

孙晓玲1，王美琴2，孙旭光1，李忠1，李姗姗1，杨秋格1，梁峰3

1.防灾科技学院灾害信息工程系，北京 101601
2.山东大学密码技术与信息安全教育部重点实验室，济南 250100
3.解放军69036部队

收稿日期:1900-01-01 修回日期:1900-01-01 出版日期:2011-12-11 发布日期:2011-12-11

Weak-key attack on 16-round Blow-CAST-Fish

SUN Xiaoling1，WANG Meiqin2，SUN Xuguang1，LI Zhong1，LI Shanshan1，YANG Qiuge1，LIANG Feng3

1.Department of Disaster Information Engineering，Institute of Disaster Prevention，Beijing 101601，China
2.Key Laboratory of Cryptologic Technology and Information Security，Ministry of Education，Shandong University，Jinan 250100，China
3.People’s Liberation Army 69036

Received:1900-01-01 Revised:1900-01-01 Online:2011-12-11 Published:2011-12-11

摘要/Abstract

摘要： Blow-CAST-Fish的轮函数F由作为算法子密钥的四个S盒构成。如果S盒产生碰撞，则可构造F函数的输入差分为非零、输出差分为零的差分特征，进而对算法进行差分分析以获取其他子密钥。研究单个S盒的碰撞，构造F函数的差分特征，并测试使特征成立的弱密钥比例，给出了特征概率为2-49，弱密钥比例为2-52.4的14轮差分特征，并以此为基础，攻击16轮Blow-CAST-Fish。

关键词: Blow-CAST-Fish, 差分特征, 弱密钥, 轮函数, S盒

Abstract: The round function F of Blow-CAST-Fish is composed of four S-boxes which are part of the subkeys.If S-boxes have a collision，the differential characteristic of function F with non-zero inputxor and a zero outputxor can be developed to perform a differential cryptanalysis of the algorithm which can recover the rest of the subkeys.After analyzing the collision of one S-box，differential characteristic of function F is constructed，then the 14-round differential characteristic with the probability 2-49 is identified.And the proportion of weak keys which can produce the differential characteristic is tested to be 2-52.4.Then based on 14-round differential characteristic，16-round Blow-CAST-Fish can be attacked.

Key words: Blow-CAST-Fish, differential characteristic, weak keys, round function, S-box

孙晓玲1，王美琴2，孙旭光1，李忠1，李姗姗1，杨秋格1，梁峰3. 16轮Blow-CAST-Fish的弱密钥攻击[J]. 计算机工程与应用, 2011, 47(35): 110-112.

SUN Xiaoling1，WANG Meiqin2，SUN Xuguang1，LI Zhong1，LI Shanshan1，YANG Qiuge1，LIANG Feng3. Weak-key attack on 16-round Blow-CAST-Fish[J]. Computer Engineering and Applications, 2011, 47(35): 110-112.

[1]	陈林，钟卫东，杨晓元，刘文超. 针对SM4的混合智能侧信道分析攻击方法[J]. 计算机工程与应用, 2019, 55(23): 86-91.
[2]	赵跃华，马林林. AES算法的轻量化实现研究[J]. 计算机工程与应用, 2015, 51(6): 79-83.
[3]	李晓东，陶涛. 求S盒布尔表达式的若干算法探讨[J]. 计算机工程与应用, 2012, 48(35): 85-87.
[4]	郭协潮. 遗传算法在信息安全中的应用研究[J]. 计算机工程与应用, 2012, 48(25): 127-131.
[5]	王念平，吴仕文. 一类分组密码的安全性能研究[J]. 计算机工程与应用, 2011, 47(17): 81-82.
[6]	袁浩，何波，李敏. 基于时空混沌的S盒产生算法[J]. 计算机工程与应用, 2010, 46(7): 115-117.
[7]	王念平. 一类不平衡Feistel密码的安全性能分析[J]. 计算机工程与应用, 2010, 46(36): 26-28.
[8]	王岐学，钱盛友，赵新民. 基于差分特征和高斯混合模型的湖南方言识别[J]. 计算机工程与应用, 2009, 45(35): 129-131.
[9]	殷新春^1,2,仇亮¹. 基于主从式并行遗传算法的S盒优化算法[J]. 计算机工程与应用, 2008, 44(24): 112-114.
[10]	王德¹,张元标². 基于混沌理论的S盒图像置乱加密算法[J]. 计算机工程与应用, 2008, 44(19): 50-52.
[11]	崔杰^1,2，刘连浩²，刘上力²，马虹博². AES S盒的分析及改进方案设计[J]. 计算机工程与应用, 2007, 43(25): 143-146.