Asset Details
Do you wish to reserve the book?
Espresso算法等价模型的密码分析
Hey, we have placed the reservation for you!
By the way, why not check out events that you can attend while you pick your title.
Oops! Something went wrong.
Looks like we were not able to place the reservation. Kindly try again later.
Are you sure you want to remove the book from the shelf?
Espresso算法等价模型的密码分析
Do you wish to request the book?
Espresso算法等价模型的密码分析
Please be aware that the book you have requested cannot be checked out. If you would like to checkout this book, you can reserve another copy
We have requested the book for you!
Your request is successful and it will be processed during the Library working hours. Please check the status of your request in My Requests.
Oops! Something went wrong.
Looks like we were not able to place your request. Kindly try again later.
Journal Article
Espresso算法等价模型的密码分析
2016
Overview
Espresso算法是由E. Dubrova和M. Hell两人设计的面向5G通信需求的序列密码算法, 算法采用256级的非线性反馈移位寄存器(NFSR)作为驱动部件, 密钥长度为128比特, 初始化向量为96比特, 过滤输出函数为6次布尔函数. 由于驱动部件为NFSR, 因此Espresso算法可以较好地抵抗标准代数攻击以及相关攻击等分析方法. 然而本文将证明无论参数如何选择, 只要是利用E. Dubrova和M. Hell所提方法构造出来的NFSR, 其任意寄存器上的输出序列均可由同级数的线性反馈移位寄存器(LFSR)通过选取适当的过滤函数生成, 即等于某个LFSR的前馈序列. 特别的, 这些LFSR是相同且过滤函数可显式地表达出来. 利用这一结果, 我们证明了Espresso算法的输出序列为某个256级LFSR的前馈过滤, 对应的过滤函数为12次布尔函数. 针对该等价模型, 我们可以成功地实施代数攻击, 其时间复杂度为O(266.86). 我们指出, 要想抵抗等价模型下的代数攻击, Espresso算法中的输出函数至少应为8次布尔函数. 最后我们还讨论了等价模型下输出函数的其他漏洞.
Publisher
Chinese Association for Cryptologic Research, Journal of Cryptologic Research
Subject
