<p>Integral attacks are among the most effective techniques for analyzing block ciphers. At FSE 2016, Todo introduced the bit-based division property, reformulating integral properties through division property. Proving security bounds against such attacks is critical for modern ciphers, as it provides a guarantee of resistance to potential vulnerabilities. In this paper, we propose a general framework for evaluating the upper bounds of integral distinguishers based on the division property. Specifically, we formalize the necessary and sufficient conditions for determining whether integral distinguishers can be constructed. Technically, we address the exponential difficulty of constraints in the ZR’s method when applied to linear layers exceeding 16 dimensions. This challenge is overcome using dynamic constraint techniques, which are utilized in linear layers of dimensions 16, 32, and 64. Furthermore, we employ two-stage division property propagation methods to reduce the complexity of the MILP model, significantly improving the solving efficiency. By applying these techniques, we demonstrate the absence of integral distinguishers constructed via division property for 5-round ARIA, 14-round SM4, 10/13-round uBlock-128/256, 5-round AES, 13-round Ascon, 11-round GIFT-64, 13-round SKINNY-64, 10-round PRESENT, and 14-round CRAFT, further advancing the understanding of ciphers’ resistance to integral attacks.</p>

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Research on constructing integral distinguishers for block ciphers via the division property

  • Yu Zhang,
  • Wenling Wu,
  • Yafei Zheng,
  • Lei Zhang,
  • Yongxia Mao

摘要

Integral attacks are among the most effective techniques for analyzing block ciphers. At FSE 2016, Todo introduced the bit-based division property, reformulating integral properties through division property. Proving security bounds against such attacks is critical for modern ciphers, as it provides a guarantee of resistance to potential vulnerabilities. In this paper, we propose a general framework for evaluating the upper bounds of integral distinguishers based on the division property. Specifically, we formalize the necessary and sufficient conditions for determining whether integral distinguishers can be constructed. Technically, we address the exponential difficulty of constraints in the ZR’s method when applied to linear layers exceeding 16 dimensions. This challenge is overcome using dynamic constraint techniques, which are utilized in linear layers of dimensions 16, 32, and 64. Furthermore, we employ two-stage division property propagation methods to reduce the complexity of the MILP model, significantly improving the solving efficiency. By applying these techniques, we demonstrate the absence of integral distinguishers constructed via division property for 5-round ARIA, 14-round SM4, 10/13-round uBlock-128/256, 5-round AES, 13-round Ascon, 11-round GIFT-64, 13-round SKINNY-64, 10-round PRESENT, and 14-round CRAFT, further advancing the understanding of ciphers’ resistance to integral attacks.