Reconstruction of s^2DES S-boxes and their Immunity to Differential Cryptanalysis

概要

論文の詳細を見る
At Crypto′92,L.R.Knudsen£7!showed that s^2DES is insufficient t o assure against differential attack.In this paper,we propose a provable design criterion to strengthen s^2DES against differential attack without disturbing its cryptographic structure. We show that new s^2DES S-boxes can be constructed with our new design criteria and suggest new 8 s^2DES S-boxes for replacing the current DES S-boxes.Simply called this algorithm as s^3DES,the result of our estimation and Knudsen′s recent analysis £9! give u s that s^3DES can resist against differential attack better than DES and s^2DES,i.e.,breaking s^3DES by differential attack is less efficient than key-exhaustive search.
社団法人電子情報通信学会の論文
1993-10-26