Sciweavers

Share
IMA
2007
Springer

Non-linear Cryptanalysis Revisited: Heuristic Search for Approximations to S-Boxes

8 years 10 months ago
Non-linear Cryptanalysis Revisited: Heuristic Search for Approximations to S-Boxes
Non-linear cryptanalysis is a natural extension to Matsui’s linear cryptanalitic techniques in which linear approximations are replaced by nonlinear expressions. Non-linear approximations often exhibit greater absolute biases than linear ones, so it would appear that more powerful attacks may be mounted. However, their use presents two main drawbacks. The first is that in the general case no joint approximation can be done for more than one round of a block cipher. Despite this limitation, Knudsen and Robshaw showed that they can be still very useful, for they allow the cryptanalist greater flexibility in mounting a classic linear cryptanalysis. The second problem concerning non-linear functions is how to identify them efficiently, given that the search space is superexponential in the number of variables. As the size of S-boxes (the elements usually approximated) increases, the computational resources available to the cryptanalyst for the search become rapidly insufficient. In t...
Juan M. Estévez-Tapiador, John A. Clark, Ju
Added 08 Jun 2010
Updated 08 Jun 2010
Type Conference
Year 2007
Where IMA
Authors Juan M. Estévez-Tapiador, John A. Clark, Julio César Hernández Castro
Comments (0)
books