Paper 2023/1831
A CP-based Automatic Tool for Instantiating Truncated Differential Characteristics - Extended Version
Abstract
An important criteria to assert the security of a cryptographic primitive is its resistance against differential cryptanalysis. For word-oriented primitives, a common technique to determine the number of rounds required to ensure the immunity against differential distinguishers is to consider truncated differential characteristics and to count the number of active S-boxes. Doing so allows one to provide an upper bound on the probability of the best differential characteristic with a reduced computational cost. However, in order to design very efficient primitives, it might be needed to evaluate the probability more accurately. This is usually done in a second step, during which one tries to instantiate truncated differential characteristics with actual values and computes its corresponding probability. This step is usually done either with ad-hoc algorithms or with CP, SAT or MILP models that are solved by generic solvers. In this paper, we present a generic tool for automatically generating these models to handle all word-oriented ciphers. Furthermore the running times to solve these models are very competitive with all the previous dedicated approaches.
Metadata
- Available format(s)
- Category
- Attacks and cryptanalysis
- Publication info
- Published elsewhere. Major revision. INDOCRYPT 2023
- Keywords
- Differential CrytanalysisConstraint ProgrammingAutomatic tool
- Contact author(s)
-
francois delobel @ uca fr
patrick derbez @ irisa fr
arthur gontier @ irisa fr
loic rouquette @ epita fr
christine solnon @ insa-lyon fr - History
- 2023-12-01: approved
- 2023-11-29: received
- See all versions
- Short URL
- https://ia.cr/2023/1831
- License
-
CC BY
BibTeX
@misc{cryptoeprint:2023/1831, author = {François Delobel and Patrick Derbez and Arthur Gontier and Loïc Rouquette and Christine Solnon}, title = {A {CP}-based Automatic Tool for Instantiating Truncated Differential Characteristics - Extended Version}, howpublished = {Cryptology {ePrint} Archive, Paper 2023/1831}, year = {2023}, url = {https://eprint.iacr.org/2023/1831} }