Abstract

PICO 算法是由 Bansod 等人在 2016 年提出的一种基于替换和排列的 SPN 网络的轻量级分组密码. 目前针对 PICO 算法抵抗差分和线性分析的能力还有待进一步评估. 本文基于 MILP 模型, 首先利用不等式组对各组件的差分特征和线性掩码的传播规律进行了精细的刻画, 其次针对密码算法的结构特点及 S 盒特性, 对该模型进行了优化, 缩小了搜索空间, 并提出了针对 PICO 算法有效的两步搜索算法. 最后利用该算法, 搜索到了 3 条新的概率为 2−63 的 21 轮差分区分器, 并首次搜索到了 3 条相关度为 2−30 的 20 轮线性区分器, 为当前公开发表的最长线性区分器.

Alternate abstract:

The PICO algorithm is a lightweight packet cipher based on substitution and permutation SPN networks proposed by Bansod et al. in 2016. The ability of the PICO algorithm to resist differential and linear analysis is yet to be further evaluated. Based on the MILP model, this paper describes the differential characteristics of the components and the propagation law of the linear mask using a set of inequalities, optimizes the model for the structural characteristics of the cryptographic algorithm and the S-box properties, narrows the search space, and proposes an effective two-step search algorithm for the PICO algorithm. Using this algorithm, three new 21-round differential distinguishers with probability 2−63 are found, and three 20-round linear distinguishers with correlation 2−30 are found, which are the longest linear distinguishers known so far.

Details

Title
基于 MILP 的 PICO 算法差分和线性区分器的搜索
Author
Kang-Kang, SHI; REN Jiong-Jiong; Shao-Zhen, CHEN; 石康康; 任炯炯; 陈少真
Pages
910-921
Section
研究论文
Publication year
2023
Publication date
2023
Publisher
Chinese Association for Cryptologic Research, Journal of Cryptologic Research
ISSN
2097-4116
Source type
Scholarly Journal
Language of publication
Chinese
ProQuest document ID
2899326622
Copyright
© 2023. This work is published under http://www.jcr.cacrnet.org.cn/EN/column/column4.shtml Notwithstanding the ProQuest Terms and Conditions, you may use this content in accordance with the terms of the License.