Skip to main content
Cryptography

Return to Answer

corrected spelling
Source Link
edit approved Jun 3, 2016 at 19:21
Raoul722
edit approved Jun 3, 2016 at 19:21
Raoul722
  • 2.9k
  • 3
  • 21
  • 40

A linear transformation in a block cipher is also considered an substitution, just not a non linear one. When they talk about active s-boxes, they are talking about not talking specifically about the nonlinear s-box, but a level of input being substituted with a different output. Combining these across multiple rounds results in what they call 'active' s-boxes.

Specifically, they are talking in regards to linear/differential characteristics over a given round count. When the differences for the characteristic are either both zero or both nonzero, the characteristic is considered consistent. Any s-box where the input/output masks for this characteristic are nonzero is considered active.

Any substitution that passes through a linear transformation can then be branched into the next substitution. In AES, there is the mixcolumnsMixColumns transformation between the nonlinear s-box of one round and the next. This linear transformation has a branch number of 5, resulting in 5 active s-boxes across 2 rounds.

This is probably not the best description, it may be better to read the initial papers on linear and differential cryptanalysis and come up with a better definition, since mine may not be applicable to a Feistel cipher.

A linear transformation in a block cipher is also considered an substitution, just not a non linear one. When they talk about active s-boxes, they are talking about not specifically about the nonlinear s-box, but a level of input being substituted with a different output. Combining these across multiple rounds results in what they call 'active' s-boxes.

Specifically, they are talking in regards to linear/differential characteristics over a given round count. When the differences for the characteristic are either both zero or both nonzero, the characteristic is considered consistent. Any s-box where the input/output masks for this characteristic are nonzero is considered active.

Any substitution that passes through a linear transformation can then be branched into the next substitution. In AES, there is the mixcolumns transformation between the nonlinear s-box of one round and the next. This linear transformation has a branch number of 5, resulting in 5 active s-boxes across 2 rounds.

This is probably not the best description, it may be better to read the initial papers on linear and differential cryptanalysis and come up with a better definition, since mine may not be applicable to a Feistel cipher.

A linear transformation in a block cipher is also considered an substitution, just not a non linear one. When they talk about active s-boxes, they are not talking specifically about the nonlinear s-box, but a level of input being substituted with a different output. Combining these across multiple rounds results in what they call 'active' s-boxes.

Specifically, they are talking in regards to linear/differential characteristics over a given round count. When the differences for the characteristic are either both zero or both nonzero, the characteristic is considered consistent. Any s-box where the input/output masks for this characteristic are nonzero is considered active.

Any substitution that passes through a linear transformation can then be branched into the next substitution. In AES, there is the MixColumns transformation between the nonlinear s-box of one round and the next. This linear transformation has a branch number of 5, resulting in 5 active s-boxes across 2 rounds.

This is probably not the best description, it may be better to read the initial papers on linear and differential cryptanalysis and come up with a better definition, since mine may not be applicable to a Feistel cipher.

Source Link
Richie Frame
Richie Frame
  • 13.2k
  • 1
  • 26
  • 42

A linear transformation in a block cipher is also considered an substitution, just not a non linear one. When they talk about active s-boxes, they are talking about not specifically about the nonlinear s-box, but a level of input being substituted with a different output. Combining these across multiple rounds results in what they call 'active' s-boxes.

Specifically, they are talking in regards to linear/differential characteristics over a given round count. When the differences for the characteristic are either both zero or both nonzero, the characteristic is considered consistent. Any s-box where the input/output masks for this characteristic are nonzero is considered active.

Any substitution that passes through a linear transformation can then be branched into the next substitution. In AES, there is the mixcolumns transformation between the nonlinear s-box of one round and the next. This linear transformation has a branch number of 5, resulting in 5 active s-boxes across 2 rounds.

This is probably not the best description, it may be better to read the initial papers on linear and differential cryptanalysis and come up with a better definition, since mine may not be applicable to a Feistel cipher.