Improved Linear Attacks on the Chinese Block Cipher Standard

The block cipher used in the Chinese Wireless LAN Standard （WAPI）, SMS4, was recently renamed as SM4, and became the block cipher standard issued by the Chinese government. This paper gives a method for finding the linear approximations of SMS4. With this method, 19-round one-dimensional approximati...

Full description

Saved in:
Bibliographic Details
Published inJournal of computer science and technology Vol. 29; no. 6; pp. 1123 - 1133
Main Author 刘明洁 陈佳哲
Format Journal Article
LanguageEnglish
Published Boston Springer US 01.11.2014
Springer Nature B.V
Subjects
Algorithms
Approximation
Artificial Intelligence
Bias
Blocking
Complexity
Computer Science
Cryptography
Data Structures and Information Theory
Encryption
Governments
Information Systems Applications (incl.Internet)
Local area networks
Regular Paper
Software Engineering
Theory of Computation
WAPI
中国政府
分组密码算法
密码标准
无线局域网标准
时间复杂度
线性密码分析
线性攻击
block cipher
multidimensional linear cryptanalysis
linear cryptanalysis
SMS4
Online AccessGet full text
ISSN1000-9000
1860-4749
DOI10.1007/s11390-014-1495-9

Cover

More Information
Summary:The block cipher used in the Chinese Wireless LAN Standard （WAPI）, SMS4, was recently renamed as SM4, and became the block cipher standard issued by the Chinese government. This paper gives a method for finding the linear approximations of SMS4. With this method, 19-round one-dimensional approximations are given, which are used to improve the previous linear cryptanalysis of SMS4. The 19-round approximations hold with bias 2-62.27; we use one of them to leverage a linear attack on 23-round SMS4. Our attack improves the previous 23-round attacks by reducing the time complexity. Furthermore, the data complexity of our attack is further improved by the multidimensional linear approach.
Bibliography:11-2296/TP
block cipher, SMS4, linear cryptanalysis, multidimensional linear cryptanalysis
The block cipher used in the Chinese Wireless LAN Standard （WAPI）, SMS4, was recently renamed as SM4, and became the block cipher standard issued by the Chinese government. This paper gives a method for finding the linear approximations of SMS4. With this method, 19-round one-dimensional approximations are given, which are used to improve the previous linear cryptanalysis of SMS4. The 19-round approximations hold with bias 2-62.27; we use one of them to leverage a linear attack on 23-round SMS4. Our attack improves the previous 23-round attacks by reducing the time complexity. Furthermore, the data complexity of our attack is further improved by the multidimensional linear approach.
Ming-Jie Liu and Jia-Zhe Chen（1Beijing International Center for Mathematical Research, Peking University, Beijing 100871, China 2 China Information Technology Security Evaluation Center, Beijing 100085, China
ObjectType-Article-1
SourceType-Scholarly Journals-1
ObjectType-Feature-2
content type line 14
content type line 23
ISSN:1000-9000
1860-4749
DOI:10.1007/s11390-014-1495-9