高级检索

    基于代数结构的LLLWBC积分攻击

    Integral Attack for LLLWBC Based on Algebraic Structure

    • 摘要: 轻量级分组密码算法的自动化分析技术是近些年研究的热点内容。LLLWBC算法是在Inscrypt 2022会议上提出的新型低延迟轻量级分组密码算法,其在软件和硬件实现上具有非常优秀的加解密性能。然而,针对一些新的安全性分析技术,LLLWBC算法是否安全还需要进一步研究。本文提出分组密码算法新的字传播轨迹构造技术,给出了7种不同布尔代数结构的自动化检测方法,并基于代数结构给出了积分区分器的自动化搜索方法。同时,研究了积分攻击密钥恢复过程中密钥猜测轨迹的构造方法,该方法能够自动化地搜索到最优的密钥猜测集合。利用上述方法,构造了LLLWBC算法9轮的积分区分器,需要的数据复杂度为2^52个LLLWBC明文分组,相比之前的积分区分器轮数增加1轮。随后,利用得到的9轮积分区分器,能够对12轮的LLLWBC算法进行密钥恢复攻击,该攻击需要的数据复杂度为2^56.17个64比特明文数据,存储复杂度为2^72个128比特的猜测密钥和2^52个64比特的密文数据,时间复杂度为2^122.09次12轮加密操作。实验结果表明:12轮的LLLWBC算法无法抵抗积分攻击,全轮为21轮的LLLWBC算法仍然具有足够的安全冗余。本文提出的积分区分器构造方法和密钥恢复方法同样适用于其他基于字运算的密码算法。

       

      Abstract: Automated analysis techniques for lightweight block cipher algorithms have been a hot topic in recent research. The LLLWBC algorithm, proposed at the Inscrypt 2022 conference, is a novel low-latency lightweight block cipher that demonstrates excellent encryption and decryption performance in both software and hardware implementations. However, its security against emerging cryptanalytic techniques requires further investigation. In this paper, a new technique for constructing word-based propagation trails in block cipher algorithms is introduced, an automated detection method for seven distinct algebraic structures is proposed, then an automated search approach for integral distinguishers is also proposed based on these algebraic structures. Furthermore, the construction method for key guessing trails during the key recovery process of integral attacks is investigated, the optimal key guessing set can be obtained by using this method. Based on the proposed method, we construct a 9-round integral distinguisher for LLLWBC with a data complexity of 2^52 plaintext blocks, which are one rounds longer than the distinguishers given by the designers. Subsequently, based on the obtained 9-round integral distinguisher, a 12-round key-recovery attack of LLLWBC is proposed, which requires the data complexity of about 2^56.17 chosen data, the memory complexity of about 2^72 128-bit guess key and 2^52 64-bit ciphertexts, the time complexity of about 2^122.09 times encryptions of 12-round LLLWBC. Experimental results demonstrate that the 12-round LLLWBC algorithm is vulnerable to integral attacks, while the full 21-round LLLWBC maintains a sufficient security margin. The construction method of integral distinguisher and key recovery technique proposed in this paper can also be applied to other word-oriented block ciphers.

       

    /

    返回文章
    返回