4
$\begingroup$

I have been reading about differential and linear cryptanalysis. They were mainly introduced by Adi Shamir and Biham to show the weakness of DES.

However, many articles state that differential and linear cryptananlysis have been considered as a technique to evaluate all other block ciphers. My question is, are they beneficial for public key cryptography? Or are they limited to private key schemes?

$\endgroup$
1
  • $\begingroup$ Differential Cryptanalysis is attributed to Shamir&Biham, but Linear Cryptanalysis is generally attributed to Matsui (although The Block Cipher Companion says it was used earlier by Tardy-Corfdir & Gilbert). Coppersmith notes they were known by the NSA prior to this $\endgroup$ Dec 11, 2013 at 10:18

2 Answers 2

4
$\begingroup$

They are generally relevant only to symmetric-key cryptography (e.g., block ciphers, hash functions, message authentication codes). There's no deep reason why -- it's just that differential and linear cryptanalysis tend to be effective against the sort of structure that are commonly used in block ciphers, but not very effective against the sort of designs that are commonly used for public-key crypto.

$\endgroup$
0
$\begingroup$

Probably there are much better methods in every case to break or heavily decrease the bit strength of asymmetric procedures than differential or linear cryptanalysis. Of course, those are useful when there is no alternative, but there is always some better method in asymmetric procedures. Also, symmetric encryption is smaller in structure (so differential and linear cryptanalysis is more feasible) and so faster than asymmetric encryption. In symmetric encryption, speed matters much more than in asymmetric, where the function performed is the important thing.

$\endgroup$

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.