Cryptology ePrint Archive: Report 2016/188
On the division property of S-boxes
Faruk Göloğlu and Vincent Rijmen and Qingju Wang
Abstract: In 2015, Todo introduced a property of multisets of a finite field called the division property. It is then used by Todo in an attack against the S7 S-box of the MISTY1 cipher. This paper provides a complete mathematical analysis of the division property. The tool we use is the discrete Fourier transform. We relate the division property to the natural concept of the degree of a subset of a finite field. This indeed provides a characterization of multisets satisfying the division property. In 2015, Sun et al. gave some properties related to the division property. In this paper we give a complete characterization and reprove many of their results. We show that the division property is actually the dual of the degree of $t$-products of the inverse S-box and show these two characteristics are affine invariants. We then propose a very efficient way to check vulnerability of a given S-box against attacks of this type. We also reprove some recent interesting results using the method based on the discrete Fourier transform.
We finally check whether the S-boxes of the candidate ciphers in the
CAESAR competition are vulnerable against attacks based on the division property.
Category / Keywords: secret-key cryptography / Discrete Fourier Transform; integral attack; division property
Date: received 23 Feb 2016
Contact author: farukgologlu at gmail com
Available format(s): PDF | BibTeX Citation
Version: 20160223:163054 (All versions of this report)
Short URL: ia.cr/2016/188
Discussion forum: Show discussion | Start new discussion
[ Cryptology ePrint archive ]