<p>With the increasingly widespread application scenarios of the Internet of Things, the demand for lightweight ciphers continues to grow. For some lightweight ciphers whose only nonlinear component is the AND gate, their resistance to linear cryptanalysis relies heavily on the properties of the AND operation, making the analysis of such AND gates crucial. In current linear cryptanalysis, two main methods exist: estimating the correlation of linear charactertics based on the number of active AND gates or constructing cipher-specific models that calculate the correlation among AND gates. The former method lacks precision, while the latter method lacks generality. Considering the correlation among AND gates allows for a more accurate assessment of a cipher’s resistance to linear cryptanalysis. However, there is currently no general model to systematically characterize the correlation between quadratic AND gates. This paper proposes a model to characterize the correlation between quadratic AND gates. We apply the model to TinyJAMBU and MiniMORUS. For the permutation <InlineEquation ID="IEq1"> <EquationSource Format="TEX">$P_l$</EquationSource> <EquationSource Format="MATHML"><math> <msub> <mi>P</mi> <mi>l</mi> </msub> </math></EquationSource> </InlineEquation> of TinyJAMBU, we improve the absolute of correlation of the 512-round linear charactertics from <InlineEquation ID="IEq2"> <EquationSource Format="TEX">$2^{-46}$</EquationSource> <EquationSource Format="MATHML"><math> <msup> <mn>2</mn> <mrow> <mo>-</mo> <mn>46</mn> </mrow> </msup> </math></EquationSource> </InlineEquation> to <InlineEquation ID="IEq3"> <EquationSource Format="TEX">$2^{-33}$</EquationSource> <EquationSource Format="MATHML"><math> <msup> <mn>2</mn> <mrow> <mo>-</mo> <mn>33</mn> </mrow> </msup> </math></EquationSource> </InlineEquation>. For 760-round, we identify a valid linear charactertics with absolute of correlation of <InlineEquation ID="IEq4"> <EquationSource Format="TEX">$2^{-63}$</EquationSource> <EquationSource Format="MATHML"><math> <msup> <mn>2</mn> <mrow> <mo>-</mo> <mn>63</mn> </mrow> </msup> </math></EquationSource> </InlineEquation>. For MiniMORUS-640 and MiniMORUS-1280, we find unique linear charactertics with absolute of correlations of <InlineEquation ID="IEq5"> <EquationSource Format="TEX">$2^{-8}$</EquationSource> <EquationSource Format="MATHML"><math> <msup> <mn>2</mn> <mrow> <mo>-</mo> <mn>8</mn> </mrow> </msup> </math></EquationSource> </InlineEquation> each.</p>

Modeling and application of AND gates’s correlation in linear cryptanalysis

期刊论文
出版模式：

开放获取
发表日期：

2026年4月28日

查看全文

Chengdong Ma,
Jie Guan,
Tairong Shi,
Senpeng Wang

摘要

With the increasingly widespread application scenarios of the Internet of Things, the demand for lightweight ciphers continues to grow. For some lightweight ciphers whose only nonlinear component is the AND gate, their resistance to linear cryptanalysis relies heavily on the properties of the AND operation, making the analysis of such AND gates crucial. In current linear cryptanalysis, two main methods exist: estimating the correlation of linear charactertics based on the number of active AND gates or constructing cipher-specific models that calculate the correlation among AND gates. The former method lacks precision, while the latter method lacks generality. Considering the correlation among AND gates allows for a more accurate assessment of a cipher’s resistance to linear cryptanalysis. However, there is currently no general model to systematically characterize the correlation between quadratic AND gates. This paper proposes a model to characterize the correlation between quadratic AND gates. We apply the model to TinyJAMBU and MiniMORUS. For the permutation $P_l$ $P_{l}$ of TinyJAMBU, we improve the absolute of correlation of the 512-round linear charactertics from $2^{-46}$ $2^{- 46}$ to $2^{-33}$ $2^{- 33}$ . For 760-round, we identify a valid linear charactertics with absolute of correlation of $2^{-63}$ $2^{- 63}$ . For MiniMORUS-640 and MiniMORUS-1280, we find unique linear charactertics with absolute of correlations of $2^{-8}$ $2^{- 8}$ each.