The group generated by the round functions of a GOST-like cipher



We define a cipher that is an extension of GOST, and study the permutation group generated by its round functions. We show that, under minimal assumptions on the components of the cipher, this group is the alternating group on the plaintext space. This we do by first showing that the group is primitive, and then applying the O’Nan-Scott classification of primitive groups.


Cryptosystems Feistel networks GOST round functions primitive groups wreath products 

Mathematics Subject Classification

20B15 20B35 94A60 


  1. 1.
    Aragona, R., Caranti, A., Dalla Volta, F., Sala, M.: On the group generated by the round functions of translation based ciphers over arbitrary finite fields. Finite Fields Appl. 25, 293–305 (2014)MathSciNetCrossRefMATHGoogle Scholar
  2. 2.
    Caranti, A., Dalla Volta, F., Sala, M.: An application of the O’Nan-Scott theorem to the group generated by the round functions of an AES-like cipher. Des. Codes Cryptogr. 52(3), 293–301 (2009)MathSciNetCrossRefMATHGoogle Scholar
  3. 3.
    Caranti, A., Dalla Volta, F., Sala, M.: On some block ciphers and imprimitive groups. Appl. Algebra Eng. Comm. Comput. 20(5–6), 339–350 (2009)MathSciNetCrossRefMATHGoogle Scholar
  4. 4.
    Coppersmith, D., Grossman, Edna: Generators for certain alternating groups with applications to cryptography. SIAM J. Appl. Math. 29(4), 624–627 (1975)MathSciNetCrossRefMATHGoogle Scholar
  5. 5.
    Dolmatov, V.: GOST 28147–89: encryption, decryption, and message authentication code (MAC) algorithms. Technical report (2010).
  6. 6.
    Even, S., Goldreich, O.: DES-like functions can generate the alternating group. IEEE Trans. Inform. Theory 29(6), 863–865 (1983)MathSciNetCrossRefMATHGoogle Scholar
  7. 7.
    Goursat, E.: Sur les substitutions orthogonales et les divisions régulières de l’espace. Ann. Sci. École Norm. Sup. 6(3), 9–102 (1889)MathSciNetMATHGoogle Scholar
  8. 8.
    Guralnick, R.M.: Subgroups of prime power index in a simple group. J. Algebra 81(2), 304–311 (1983)MathSciNetCrossRefMATHGoogle Scholar
  9. 9.
    Kaliski Jr., B.S., Rivest, R.L., Sherman, A.T.: Is the data encryption standard a group? (Results of cycling experiments on DES). J. Cryptol. 1(1), 3–36 (1988)MathSciNetCrossRefMATHGoogle Scholar
  10. 10.
    Li, C.H.: The finite primitive permutation groups containing an abelian regular subgroup. Proc. Lond. Math. Soc. 87(3), 725–747 (2003)MathSciNetCrossRefMATHGoogle Scholar
  11. 11.
    Liebeck, M.W., Praeger, C.E., Saxl, J.: On the O’Nan-Scott theorem for finite primitive permutation groups. J. Aust. Math. Soc. Ser. A 44(3), 389–396 (1988)MathSciNetCrossRefMATHGoogle Scholar
  12. 12.
    Murphy, S., Paterson, K., Wild, P.: A weak cipher that generates the symmetric group. J. Cryptol. 7(1), 61–65 (1994)MathSciNetCrossRefMATHGoogle Scholar
  13. 13.
    Oliynykov, R.: Cryptanalysis of symmetric block ciphers based on the Feistel network with non-bijective S-boxes in the round function. Cryptology ePrint Archive, Report 2011/685 (2011).
  14. 14.
    Paterson, K.G.: Imprimitive permutation groups and trapdoors in iterated block ciphers, Fast software encryption, LNCS, vol. 1636, pp. 201–214. Springer, Berlin (1999)MATHGoogle Scholar
  15. 15.
    Petrillo, J.: Goursat’s other theorem. Coll. Math. J. 40(2), 119–124 (2009)CrossRefGoogle Scholar
  16. 16.
    Sparr, R., Wernsdorf, R.: Group theoretic properties of Rijndael-like ciphers. Discrete Appl. Math. 156(16), 3139–3149 (2008)MathSciNetCrossRefMATHGoogle Scholar
  17. 17.
    Sparr, R., Wernsdorf, R.: The round functions of KASUMI generate the alternating group. J. Math. Cryptol. 9(1), 23–32 (2015)MathSciNetCrossRefMATHGoogle Scholar
  18. 18.
    Wernsdorf, R.: The one-round functions of the DES generate the alternating group, Advances in cryptology–EUROCRYPT ’92 (Balatonfüred: Lecture Notes in Computer Science, vol. 658. Springer, Berlin (1992)Google Scholar

Copyright information

© Fondazione Annali di Matematica Pura ed Applicata and Springer-Verlag Berlin Heidelberg 2016

Authors and Affiliations

  1. 1.Dipartimento di MatematicaUniversità degli Studi di TrentoTrentoItaly

Personalised recommendations