高级加密标准的差分特征

高级加密标准的差分特征 Differential Characters of the Advanced Encryption Standard 曾祥勇 ZENG Xiang-yong~1 1 2 3 4 5 first-author 张焕国 ZHANG Huan-guo~1 1 2 3 4 5 刘合国 LIU He-guo~2 1 2 3 4 5 武汉大学计算机学院 武汉大学计算机学院 School of Computer, Wuhan University School of Computer, Wuhan University 信息安全国家重点实验室中国科学院研究生院,湖北,武汉,430072 信息安全国家重点实验室中国科学院研究生院,湖北,武汉,430072 my of Sciences my of Sciences ,北京,100039 ,北京,100039 College of Mathematics and Computer Science, Hubei University College of Mathematics and Computer Science, Hubei University ,湖北,武汉,430062 ,湖北,武汉,430062 湖北大学数学与计算机科学学院 湖北大学数学与计算机科学学院 通过对美国高级加密标准（AES）特点的分析,引入差分特征输入差分活性盒分布图的概念,给出了一种计算AES差分特征的方法,从而使得计算AES的多轮差分特征成为可能.并且给出了用这种方法获得的AES3～12轮高概率的差分特征,其中3、4轮差分特征的概率与理论值相符.到目前为止,本文给出的3～12轮差分特征概率是所有已知的AES的多轮差分特征概率中最大的;并且首次给出了AESr（3≤r≤12）轮最大概率差分特征的差分活性盒数目范围及概率上界. Searching differential characters with high probability is an effective way to attack block cipher. To find a practical and effective method to attack American advanced encvyption standard（AES） becomes a new challenge in the field of block cipher. Unfortunately, research results show that there is no effective way to attack AES, nor even compute many rounds differential or linear characters of AES. We give a new method to compute differential characters of AES by analyzing characteristic of AES and make it possible to compute many rounds differential of AES. In this paper we introduce our results about 3～12 rounds differential characters of AES in details, where those of 3～4 rounds are the best. By now they have the biggest probability among all known differential characters of AES, and we also give the range of active boxes of many rounds differential characters of AES with the highest probability and their better upper bound. 分组密码 差分特征 高级加密标准 block cipher differential character AES（advanced encryption standard） O157.4 国家自然科学基金（60373089,60373041）;湖北省武汉市"晨光计划"（20025001007）;湖北省自然科学基金资助项目（2002AB0037） 2004-01-01 2021-04-01 1