Paper 2016/533

New Insights on AES-like SPN Ciphers

Bing Sun, Meicheng Liu, Jian Guo, Longjiang Qu, and Vincent Rijmen

Abstract

It has been proved in Eurocrypt 2016 that if the details of the S-boxes are not exploited, an impossible differential and a zero-correlation hull can extend over at most 4 rounds of the AES. This paper concentrates on distinguishing attacks on AES-like SPN ciphers by investigating the details of both the S-boxes and the MDS matrices and illustrates some new insights on the security of these schemes. Firstly, we construct several types of $5$-round zero-correlation linear hulls for AES-like ciphers that adopt identical S-boxes to construct the round function and that have two identical elements in a column of the inverse of their MDS matrices. We then use these linear hulls to construct 5-round integrals provided that the difference of two sub-key bytes is known. Furthermore, we prove that we can always distinguish 5 rounds of such ciphers from random permutations even when the difference of the sub-keys is unknown. Secondly, the constraints for the S-boxes and special property of the MDS matrices can be removed if the cipher is used as a building block of the Miyaguchi-Preneel hash function. As an example, we construct two types of 5-round distinguishers for the hash function Whirlpool. Finally, we show that, in the chosen-ciphertext mode, there exist some nontrivial distinguishers for 5-round AES. To the best of our knowledge, this is the longest distinguishing attack for the round-reduced AES in the secret-key setting. Since the 5-round distinguisher for the AES can only be constructed in the chosen-ciphertext mode, the security margin for the round-reduced AES under the chosen-plaintext attack may be different from that under the chosen-ciphertext attack.

Metadata
Available format(s)
PDF
Category
Secret-key cryptography
Publication info
A minor revision of an IACR publication in CRYPTO 2016
Keywords
Distinguishing attackAESWhirlpoolZero correlation linearIntegral
Contact author(s)
happy_come @ 163 com
History
2016-06-02: last of 3 revisions
2016-05-31: received
See all versions
Short URL
https://ia.cr/2016/533
License
Creative Commons Attribution
CC BY

BibTeX

@misc{cryptoeprint:2016/533,
      author = {Bing Sun and Meicheng Liu and Jian Guo and Longjiang Qu and Vincent Rijmen},
      title = {New Insights on {AES}-like {SPN} Ciphers},
      howpublished = {Cryptology {ePrint} Archive, Paper 2016/533},
      year = {2016},
      url = {https://eprint.iacr.org/2016/533}
}
Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.