When carrying differential analysis of a SPN network, how can one determine the number of required plaintext for the attack to be successful with high probability?

  • $\begingroup$ You might want first to compute the probability of your trails and select the one with the highest chances. $\endgroup$
    – Biv
    Apr 6, 2017 at 16:11
  • $\begingroup$ @Biv I've already done that. Just not sure how to proceed from this point. $\endgroup$
    – SpiderRico
    Apr 6, 2017 at 16:12
  • $\begingroup$ let us assume that you have a probability $1/2^p$, then you will need at least $2^p$ pair to exhibit this characteristic once (in average). By multiplying this number by... 1000 you should be able to have the number of pair that you need. $\endgroup$
    – Biv
    Apr 6, 2017 at 16:24
  • $\begingroup$ For DES, they need $2^{20} \approx 1000000$ pairs while the probability of the characteristic is $1/55000$. $\endgroup$
    – Biv
    Apr 6, 2017 at 16:27
  • $\begingroup$ @Biv I am facing the same question as SpiderRico. Hope I can get an answer here: Let us assume I have a trail with probability 0.0264. This is as fraction 7/1024. 1024 = 2^10 => I need at least 1024 Pairs, right? Do you may be have some literature about that? May be a paper? I need something to read about that, but did not find anything except this post here. $\endgroup$
    – chris000r
    Apr 26, 2019 at 17:12


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.