Abstract
Security analysis of block ciphers against linear cryptanalysis has virtually always been based on the bias estimates obtained by the Piling-Up Lemma (PUL)method. Despite its common use, and despite the fact that the independence assumption of the PUL is known not to hold in practice, accuracy of the PUL method has not been analyzed to date. In this study , we start with an experimental analysis of the PUL method.The results on RC5 show that the estimates by the PUL method can be quite inaccurate for some non-Feistel ciphers. On the other hand, the tests with SP-structured Feistel ciphers consistently show a much higher degree of accuracy.
In the second part, we analyze several theories for an alternative method for bias estimation , including correlation matrices, linear hulls, and statistical sampling. We show a practical application of the theory of correlation matrices, where better estimates than the PUL method are obtained. We point out certain problems in some current applications of linear hulls. We show that the sample size required for a reliable statistical estimator is an impractically large amount for most practical cases.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Preview
Unable to display preview. Download preview PDF.
References
Ross Anderson, Eli Biham, and Lars Knudsen. Serpent:A Proposal for the Advanced Encryption Standard. Available from http://www.nist.gov/aes. 55
Uwe Blöcher and Markus Dichtl. Problems with the linear cryptanalysis of DES using more than one active S-box per round. In Fast Sof t ware Encryption 1994. 53
Johan Borst, Bart Preneel, and Joos Vandewalle. Linear cryptanalysis of RC5 and RC6. In Fast Software Encryption, 6th International Workshop 1999. 60, 60
Florent Chabaud and Serge Vaudenay. Links between differential and linear cryptanalysis.In Advances in Cryptology—Eurocrypt’94 Springer-Verlag, 1994. 59, 66
S. Contini, R. Rivest, M. Robshaw, and L. Yin. The Security of the RC6 Block Cipher. Available from http://www.rsasecurity.com/rsalabs/aes. 61
Don Coppersmith.The Data Encryption Standard (DES)and its strength against attacks. IBM Journal of Research and Development May(3): 243–250, 38 1994. 55, 55
Joan Daemen, René Govaerts, and Joos Vandewalle. Correlation matrices. In Fast Software Encryption, Second International Workshop Springer-Verlag, 1994. 59
Burton S.Kaliski Jr.and Yiqun Lisa Yin. On differential and linear cryptanalysis of the RC5 encryption algorithm. In Advances in Cryptology—Crypto’95 54, 60
Burton S.Kaliski Jr. and Yiqun Lisa Yin. On the security of the RC5 encryption algorithm. Technical Report TR-602,Version 1.0, RSA Laboratories, 1998. 60
E.L. Lehmann and George Casella. Theory of Point Estimation Springer Texts in Statistics. Springer-Verlag, 2nd edition, 1998. 62, 62, 65
Mitsuru Matsui. Linear cryptanalysis method for DES cipher. In Advances in Cryptology—Eurocrypt’93 Springer-Verlag, 1993. 52, 54, 55, 56
Mitsuru Matsui. The first experimental cryptanalysis of the Data Encryption Standard. In Advances in Cryptology—Crypto’94 Springer-Verlag, 1994. 55, 56
Mitsuru Matsui. New structure of block ciphers with provable security against differential and linear cryptanalysis. In Fast Soft ware Encryption 1996. 61
Kaisa Nyberg. Linear approximation of block ciphers. In Advances in Cryptology—Eurocrypt’94 Springer-Verlag, 1994. 61, 61, 61, 66, 66
Kaisa Nyberg. Correlation theorems in cryptanalysis.To appear in Discrete Ap-plied Mathematics. 61
Ali Aydin Selçuk. New results in linear cryptanalysis of RC5. In Fast Sof t ware Encryption, 5th International Workshop Springer-Verlag, 1998.60
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2000 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Ali Aydin, S. (2000). On Bias Estimation in Linear Cryptanalysis. In: Roy, B., Okamoto, E. (eds) Progress in Cryptology —INDOCRYPT 2000. INDOCRYPT 2000. Lecture Notes in Computer Science, vol 1977. Springer, Berlin, Heidelberg. https://doi.org/10.1007/3-540-44495-5_6
Download citation
DOI: https://doi.org/10.1007/3-540-44495-5_6
Published:
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-540-41452-0
Online ISBN: 978-3-540-44495-4
eBook Packages: Springer Book Archive