New Links between Differential and Linear Cryptanalysis

  • Céline Blondeau
  • Kaisa Nyberg
Conference paper

DOI: 10.1007/978-3-642-38348-9_24

Part of the Lecture Notes in Computer Science book series (LNCS, volume 7881)
Cite this paper as:
Blondeau C., Nyberg K. (2013) New Links between Differential and Linear Cryptanalysis. In: Johansson T., Nguyen P.Q. (eds) Advances in Cryptology – EUROCRYPT 2013. EUROCRYPT 2013. Lecture Notes in Computer Science, vol 7881. Springer, Berlin, Heidelberg

Abstract

Recently, a number of relations have been established among previously known statistical attacks on block ciphers. Leander showed in 2011 that statistical saturation distinguishers are on average equivalent to multidimensional linear distinguishers. Further relations between these two types of distinguishers and the integral and zero-correlation distinguishers were established by Bogdanov et al. [6]. Knowledge about such relations is useful for classification of statistical attacks in order to determine those that give essentially complementary information about the security of block ciphers. The purpose of the work presented in this paper is to explore relations between differential and linear attacks. The mathematical link between linear and differential attacks was discovered by Chabaud and Vaudenay already in 1994, but it has never been used in practice. We will show how to use it for computing accurate estimates of truncated differential probabilities from accurate estimates of correlations of linear approximations. We demonstrate this method in practice and give the first instantiation of multiple differential cryptanalysis using the LLR statistical test on PRESENT. On a more theoretical side, we establish equivalence between a multidimensional linear distinguisher and a truncated differential distinguisher, and show that certain zero-correlation linear distinguishers exist if and only if certain impossible differentials exist.

Keywords

statistical cryptanalysis block cipher key-alternating block cipher multiple differential attack truncated differential multidimensional linear attack zero-correlation impossible differential 

Preview

Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

Copyright information

© International Association for Cryptologic Research 2013

Authors and Affiliations

  • Céline Blondeau
    • 1
  • Kaisa Nyberg
    • 1
  1. 1.School of Science, Department of Information and Computer ScienceAalto UniversityFinland

Personalised recommendations