8～10轮AES-128的biclique攻击

8～10轮AES-128的biclique攻击 Biclique Attacks on 8～10 Rounds of AES-128 董晓丽 DONG Xiaoli 1 first-author 张雪锋 ZHANG Xuefeng 1 侯红霞 HOU Hongxia 1 赵庆兰 ZHAO Qinglan 1 西安邮电大学通信与信息工程学院 西安邮电大学通信与信息工程学院 School of Telecommunication and Information Engineering,Xi’an University of Posts and Telecommunications School of Telecommunication and Information Engineering,Xi’an University of Posts and Telecommunications 高级加密标准（AES）是信息安全中实现数据加密、认证和密钥管理的核心分组密码算法,其安全性分析是密码学的重要课题之一.本文利用AES独立的相关密钥差分,构造了3轮biclique;基于该biclique,使用重计算技术,针对8 1 0轮AES-128给出新攻击.研究结果表明,攻击8轮AES-128所需的数据复杂度为264选择密文,时间复杂度为2125.29次加密;攻击9轮AES-128所需的数据复杂度为264选择密文,时间复杂度为2125.80次加密;攻击10轮AES-128所需的数据复杂度为264选择密文,时间复杂度为2126.25次加密.与已有的同轮攻击结果相比,新分析所需要的时间复杂度或数据复杂度降低. Advanced encryption standcrd（AES）is the core of block cipher that provides data encryption,authentication and key management in information security.A 3-round biclique is constructed based on independent relatedkey differentials.Attacks on 8-10 rounds of AES-128 are presented by the biclique and the recomputation technique.It is shown that the attack on 8-round AES-128 requires data complexity of about 264 chosen ciphertexts,time complexity of about 2125.29 encryptions;the attack on 9-round AES-128 requires data complexity of about 264 chosen ciphertexts,time complexity of about 2125.80 encryptions;the attack on 10-round AES-128 requires data complexity of about 264 chosen ciphertexts,time complexity of about 2126.25 encryptions.The data complexity or the time complexity for the attack is lower than any previous published cryptanalytic results on AES-128 in terms of the same number of attacked rounds. 密码分析 分组密码 高级加密标准（AES） cryptanalysis block cipher advanced encryption standard（AES） 10.14188/j.1671-8836.2013.06.005 TN918.1 国家自然科学基金（61100231）;陕西省教育厅科学研究计划基金（12JK0551）;西安邮电大学青年教师科研基金项目（ZL2013-02）;西安邮电大学重点学科建设资助项目 2013-06-01 2021-04-01 6 59