IEICE TRANSACTIONS on Fundamentals
The Security of an RDES Cryptosystem against Linear Cryptanalysis
Summary :
RDES cryptosystem is an n-round DES in which an probabilistic swapping is added onto the right half of the input in each round. It is more effective than a simple increase of DES rounds for a countermeasure against differential attack. In this paper, we show that the RDES is also effective against linear cryptanalysis. We applied Matsui's search algorithm to find the best expression for RDES-1 and RDES-2. The results are as follows: (a) The 16-round RDES-1 is approximately as strong as a 22-round DES, and the 16-round RDES-2 is approximately as strong as a 29-round DES. (b) Linear cryptanalysis for a 16-round RDES-1 and a 16-round RDES-2 requires more than 264 known-plaintexts.
- Publication
- IEICE TRANSACTIONS on Fundamentals Vol.E79-A No.1 pp.12-19
- Publication Date
- 1996/01/25
- Publicized
- Online ISSN
- DOI
- Type of Manuscript
- Special Section PAPER (Special Section on Cryptography and Information Security)
- Category
Authors
Keyword
Latest Issue
Copyrights notice of machine-translated contents
The copyright of the original papers published on this site belongs to IEICE. Unauthorized use of the original or translated papers is prohibited. See IEICE Provisions on Copyright for details.
Cite this
Copy
Yasushi NAKAO, Toshinobu KANEKO, Kenji KOYAMA, Routo TERADA, "The Security of an RDES Cryptosystem against Linear Cryptanalysis" in IEICE TRANSACTIONS on Fundamentals,
vol. E79-A, no. 1, pp. 12-19, January 1996, doi: .
Abstract: RDES cryptosystem is an n-round DES in which an probabilistic swapping is added onto the right half of the input in each round. It is more effective than a simple increase of DES rounds for a countermeasure against differential attack. In this paper, we show that the RDES is also effective against linear cryptanalysis. We applied Matsui's search algorithm to find the best expression for RDES-1 and RDES-2. The results are as follows: (a) The 16-round RDES-1 is approximately as strong as a 22-round DES, and the 16-round RDES-2 is approximately as strong as a 29-round DES. (b) Linear cryptanalysis for a 16-round RDES-1 and a 16-round RDES-2 requires more than 264 known-plaintexts.
URL: https://global.ieice.org/en_transactions/fundamentals/10.1587/e79-a_1_12/_p
Copy
@ARTICLE{e79-a_1_12,
author={Yasushi NAKAO, Toshinobu KANEKO, Kenji KOYAMA, Routo TERADA, },
journal={IEICE TRANSACTIONS on Fundamentals},
title={The Security of an RDES Cryptosystem against Linear Cryptanalysis},
year={1996},
volume={E79-A},
number={1},
pages={12-19},
abstract={RDES cryptosystem is an n-round DES in which an probabilistic swapping is added onto the right half of the input in each round. It is more effective than a simple increase of DES rounds for a countermeasure against differential attack. In this paper, we show that the RDES is also effective against linear cryptanalysis. We applied Matsui's search algorithm to find the best expression for RDES-1 and RDES-2. The results are as follows: (a) The 16-round RDES-1 is approximately as strong as a 22-round DES, and the 16-round RDES-2 is approximately as strong as a 29-round DES. (b) Linear cryptanalysis for a 16-round RDES-1 and a 16-round RDES-2 requires more than 264 known-plaintexts.},
keywords={},
doi={},
ISSN={},
month={January},}
Copy
TY - JOUR
TI - The Security of an RDES Cryptosystem against Linear Cryptanalysis
T2 - IEICE TRANSACTIONS on Fundamentals
SP - 12
EP - 19
AU - Yasushi NAKAO
AU - Toshinobu KANEKO
AU - Kenji KOYAMA
AU - Routo TERADA
PY - 1996
DO -
JO - IEICE TRANSACTIONS on Fundamentals
SN -
VL - E79-A
IS - 1
JA - IEICE TRANSACTIONS on Fundamentals
Y1 - January 1996
AB - RDES cryptosystem is an n-round DES in which an probabilistic swapping is added onto the right half of the input in each round. It is more effective than a simple increase of DES rounds for a countermeasure against differential attack. In this paper, we show that the RDES is also effective against linear cryptanalysis. We applied Matsui's search algorithm to find the best expression for RDES-1 and RDES-2. The results are as follows: (a) The 16-round RDES-1 is approximately as strong as a 22-round DES, and the 16-round RDES-2 is approximately as strong as a 29-round DES. (b) Linear cryptanalysis for a 16-round RDES-1 and a 16-round RDES-2 requires more than 264 known-plaintexts.
ER -
English
