Questions tagged [differential-analysis]
Differential cryptanalysis is a form of cryptanalysis which studies cryptographic algorithms by observing how differences in input affect differences in output.
22
questions
6
votes
2
answers
6k
views
DES with the bitwise complement of a key
I was reading upon Biham and Shamir's paper and a fact has been presented over there:
if $ P_1 = \bar P_2$ and I choose a key $K_1 = \bar K_2$ then in that case
$$T_1 = DES(P_1, K_1)$$
$$T_2 = DES(...
- 163
18
votes
1
answer
2k
views
Understanding the wide trail design strategy
I am trying to understand the wide trail design strategy. I have read the paper (paywall-free preprint) which describes it from the point of view of AES. From what I understand, it is a technique to ...
- 15.1k
31
votes
2
answers
5k
views
How do I apply differential cryptanalysis to a block cipher?
I have read a lot of summaries of block ciphers particularly with regards to the NIST competitions stating that reduced-round block ciphers are – for example – vulnerable to differential cryptanalysis....
user46
3
votes
1
answer
1k
views
Differential cryptanalysis tutorial of Howard M. Heys
I am currently working on some research about differential cryptanalysis. There is a lot of literature about that topic in the internet. One of the most known paper is the tutorial on linear and ...
- 509
9
votes
2
answers
7k
views
How to build a difference distribution table?
i am studying about differential cryptanalysis, and found one metric to measure the resistance of a sbox to it, but to use it, it is necessary to build a difference distribution table, like the one in ...
- 281
5
votes
1
answer
536
views
What is the difference between strong/weak alignment?
In this answer there is the mention of "weak alignment", followed by an indication that it is related to "resistance to truncated differential cryptanalysis".
What exactly is the difference between ...
- 19.5k
2
votes
1
answer
1k
views
How can one construct the weakest S-box ever?
Is it possible to come up with an NxN S-box which would have a difference distribution table with N entries of 100% probability?
I am studying the properties of S-boxes and I don't quite understand ...
- 81
14
votes
4
answers
6k
views
Why is the permutation in AES (and other ciphers) not random or key-dependent?
If the permutation in AES (or other ciphers) were randomly generated or dependent on the key, would it not be stronger against differential attacks?
If this is so, then might we need fewer rounds for ...
- 1,025
6
votes
2
answers
1k
views
Security of the AES with a Secret S-box
In this paper they change the $AES$ S-box to a uniformly random one and answer the questions:
How does the security of AES change when the S-box is changed by a secret S-box?
Would it be safe to ...
- 1,025
5
votes
1
answer
1k
views
Differential Cryptanalysis for Hash functions
How is differential cryptanalysis used to attack hash functions? I've been struggling through a couple academic papers and thesis's on the subject but they all sound like greek to me. Does anyone know ...
- 55
7
votes
2
answers
916
views
S-box with differential uniformity = 2
I read that we do not know if there exists an 8x8 sbox with differential uniformity = 2.
I suppose we cannot compute every possible sbox because there are $64!$ possible s-boxes. Am I right?
- 304
6
votes
1
answer
1k
views
Differential cryptanalysis - breaking the last round of FEAL4?
I've been trying to learn cryptanalysis. I've come across this resource which proved very helpful:
http://theamazingking.com/crypto-feal.php
So far I've been almost successful in breaking FEAL4 ...
- 7,438
6
votes
2
answers
1k
views
Cryptanalysis and weaknesses of SEED cipher
I've discovered that a client has SEED enabled in their SSL ciphers, and would like to know a bit more about it from a security perspective. The Wikipedia article doesn't mention any flaws, yet I've ...
- 3,527
4
votes
1
answer
772
views
How to prove a cipher resistant to differential cryptanalysis?
How do you prove that a cipher is resistant to differential cryptanalysis? It's said that Rijndael has been proven resistance to differential cryptanalysis. How do cryptographers do that?
- 157
2
votes
0
answers
51
views
(Enhancing Linear-Differential Cryptanalysis - Biham et al.) Diff-Lin Extension Characteristic and Characteristic Probability
I studied Langford and Hellman's Differential-Linear Cryptanalysis and moved on to Biham, Dunkelman and Keller's Enhancing Linear-Differential Cryptanalysis.
In the paper, although I've read many ...
- 96
2
votes
3
answers
1k
views
What is the point of differential cryptanalysis when the amount of necessary plaintext is unrealistic?
As someone with a non-crypto background, I learned that differential cryptanalysis is mostly weak against ciphers like DES because, being a chosen plaintext attack, for a state of art complexity of $2^...
- 141
2
votes
1
answer
196
views
Differential cryptanalysis in "The Block Cipher Companion"
I am practically implementing a differential cryptanalysis on a cipher which can be found in the book "The Block Cipher Companion". Following image shows the cipher:
In Fig. 6.10 (page 126) there are ...
- 509
2
votes
2
answers
1k
views
How does linear vs. non-linear operations relate to cryptographic security and differential cryptanalysis?
I understand what a linear operation is and what a non-linear operation is, but I would like an explanation of specifically how a non-linear operation on input data mitigates differential crytanalysis ...
1
vote
1
answer
207
views
What is a differential attack on a hash function? How would one attack a SHA algorithm and what would achieve?
Currently, I have been assigned to attack a reduced version of SHA-1. What are we trying to achieve? How do we attack it?
- 11
1
vote
2
answers
967
views
Searching for a differential characteristic (differential cryptanalysis)
Currently I am doing some research on differential cryptanalysis. In general I got a good idea about the attack and how it is done.
I am currently talking about ciphers with multiple rounds. It ...
- 509
0
votes
1
answer
296
views
What makes this mixer function resistant to differential cryptanalysis?
I recently learned how differential cryptanalysis works, and decided to have a play around with testing various designs for resistance against attack.
My testing algorithm is essentially to loop ...
- 3,527
-1
votes
1
answer
239
views
Compression function cryptanalysis
A compression function converts a fixed-sized input into a smaller fixed size output. Suppose that one has a large collection of input-output pairs for an unknown compression function.
We can assume ...
- 31