Publication

Feistel ciphers with L2-decorrelation

Serge Vaudenay
1999
Conference Papers

Abstract

Recently, we showed how to strengthen block ciphers by decorrelation techniques. In particular, we proposed two practical block ciphers, one based on the GF(2n)-arithmetics, the other based on the x mod p mod 2n primitive with a prime p=2n(1+d). We show how to achieve similar decorrelation with a prime p=2n(1-d). For this we have to change the choice of the norm in the decorrelation theory and replace the L8 norm by the L2 norm. We propose a new practical block cipher which is provably resistant against differential and linear cryptanalysis

Official source

https://infoscience.epfl.ch/entities/publication/cdff0f8a-1c94-4e15-9291-1d8def24f506

About this result

This page is automatically generated and may contain information that is not correct, complete, up-to-date, or relevant to your search query. The same applies to every other page on this website. Please make sure to verify the information with EPFL's official sources.

Graph Chat

Chat with Graph Search

Ask any question about EPFL courses, lectures, exercises, research, news, etc. or try the example questions below.

DISCLAIMER: The Graph Chatbot is not programmed to provide explicit or categorical answers to your questions. Rather, it transforms your questions into API requests that are distributed across the various IT services officially administered by EPFL. Its purpose is solely to collect and recommend relevant references to content that you can explore to help you answer your questions.

Serge Vaudenay
1999
Conference Papers

Abstract

Official source

https://infoscience.epfl.ch/entities/publication/cdff0f8a-1c94-4e15-9291-1d8def24f506

About this result

Related concepts (32)

Block cipher

In cryptography, a block cipher is a deterministic algorithm that operates on fixed-length groups of bits, called blocks. Block ciphers are the elementary building blocks of many cryptographic protocols. They are ubiquitous in the storage and exchange of data, where such data is secured and authenticated via encryption. A block cipher uses blocks as an unvarying transformation. Even a secure block cipher is suitable for the encryption of only a single block of data at a time, using a fixed key.

One-way compression function

In cryptography, a one-way compression function is a function that transforms two fixed-length inputs into a fixed-length output. The transformation is "one-way", meaning that it is difficult given a particular output to compute inputs which compress to that output. One-way compression functions are not related to conventional data compression algorithms, which instead can be inverted exactly (lossless compression) or approximately (lossy compression) to the original data.

Linear cryptanalysis

In cryptography, linear cryptanalysis is a general form of cryptanalysis based on finding affine approximations to the action of a cipher. Attacks have been developed for block ciphers and stream ciphers. Linear cryptanalysis is one of the two most widely used attacks on block ciphers; the other being differential cryptanalysis. The discovery is attributed to Mitsuru Matsui, who first applied the technique to the FEAL cipher (Matsui and Yamagishi, 1992).

Related publications (7)

Feistel ciphers with L2-decorrelation

Chat with Graph Search

Breaking the IOC Authenticated Encryption Mode

Synthetic Linear Analysis with Applications to CubeHash and Rabbit

Cryptanalysis of the full MMB block cipher