Provable security against differential and linear cryptanalysis for the SPN structure

Seokhie Hong, Sangjin Lee, Jongin Lim, Jaechul Sung, Donghyeon Cheon, Inho Cho

Research output: Chapter in Book/Report/Conference proceedingConference contribution

57 Citations (Scopus)

Abstract

In the SPN (Substitution-Permutation Network) structure, it is very important to design a diffusion layer to construct a secure block cipher against differential cryptanalysis and linear cryptanalysis. The purpose of this work is to prove that the SPN structure with a maximal diffusion layer provides a provable security against differential cryptanalysis and linear cryptanalysis in the sense that the probability of each differential (respectively linear hull) is bounded by pn (respectively qn), where p (respectively q) is the maximum differential (respectively liner hull) probability of n S-boxes used in the substitution layer.We will also give a provable security for the SPN structure with a semi-maximal diffusion layer against differential cryptanalysis and linear cryptanalysis.

Original languageEnglish
Title of host publicationFast Software Encryption - 7th International Workshop, FSE 2000, Proceedings
EditorsBruce Schneier
PublisherSpringer Verlag
Pages273-283
Number of pages11
ISBN (Print)9783540447061
DOIs
Publication statusPublished - 2001
Event7th International Workshop on Fast Software Encryption, FSE 2000 - New York, United States
Duration: 2000 Apr 102000 Apr 12

Publication series

NameLecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume1978
ISSN (Print)0302-9743
ISSN (Electronic)1611-3349

Other

Other7th International Workshop on Fast Software Encryption, FSE 2000
Country/TerritoryUnited States
CityNew York
Period00/4/1000/4/12

ASJC Scopus subject areas

  • Theoretical Computer Science
  • Computer Science(all)

Fingerprint

Dive into the research topics of 'Provable security against differential and linear cryptanalysis for the SPN structure'. Together they form a unique fingerprint.

Cite this