S-box, SET, Match: A Toolbox for S-box Analysis

Picek, Stjepan; Batina, Lejla; Jakobović, Domagoj; Ege, Barış; Golub, Marin

doi:10.1007/978-3-662-43826-8_10

Cited by 33 publications

(16 citation statements)

References 20 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Over 20 parameters have been proposed so far and because of the problem complexity it is still possible to develop new measures. For example the open source tool for S-boxes analysis "S-box, SET, Match" [7] computes 17 parameters.…”

Section: Previous Workmentioning

confidence: 99%

“…7. To check the cryptographic properties of the S-box we may apply a set of tests [7]. Selected results are presented below:…”

Section: An Approach To S-box Evaluationmentioning

confidence: 99%

“…10 is a modified AES S-box proposed by Fuller and Millan [14]. To start with, let us analyze this S-box using S-box, SET, Match tool [7]. We obtain the following results:…”

Section: An Approach To S-box Evaluationmentioning

confidence: 99%

See 2 more Smart Citations

An approach to evaluation of S-boxes

Bucholc

2017

ELECTROTECHNICAL REVIEW

View full text Add to dashboard Cite

The paper presents an approach to analysis of substitution boxes (S-boxes) used in block ciphers. The proposed method can serve as an additional criterion for evaluation of S-box quality. In some cases the method may reveal that the S-box design is based on some simple mathematic formula. Streszczenie. W pracy przedstawiono pewne podejście do analizy własności bloków podstawieniowych (s-bloków) wykorzystywanych w szyfrach blokowych. Zaproponowana metoda może służyć jako dodatkowe kryterium do oceny kryptograficznych własności s-bloków. W niektórych przypadkach możliwe jest wykrycie, że s-blok został zaprojektowany z wykorzystaniem prostego przekształcenia matematycznego. (Pewne podejście do ewaluacji s-bloków).

show abstract

Section: Previous Workmentioning

confidence: 99%

“…7. To check the cryptographic properties of the S-box we may apply a set of tests [7]. Selected results are presented below:…”

Section: An Approach To S-box Evaluationmentioning

confidence: 99%

See 1 more Smart Citation

An approach to evaluation of S-boxes

Bucholc

2017

ELECTROTECHNICAL REVIEW

View full text Add to dashboard Cite

show abstract

“…In most cases, as in impossible differential and integral cryptanalysis, we do not need to investigate the details of the S-boxes. Generally, though there has been lots of work concentrating on the design and cryptanalysis of S-boxes [13], most cryptanalytic results by using impossible differential, integral and zero correlation linear cryptanalysis are independent of the choices of the S-boxes. If we choose some other S-boxes in a cipher, the corresponding cryptanalytic results will remain almost the same.…”

Section: Introductionmentioning

confidence: 99%

Links Among Impossible Differential, Integral and Zero Correlation Linear Cryptanalysis

Sun

Liu

Rijmen

et al. 2015

Lecture Notes in Computer Science

View full text Add to dashboard Cite

Abstract. As two important cryptanalytic methods, impossible differential cryptanalysis and integral cryptanalysis have attracted much attention in recent years. Although relations among other important cryptanalytic approaches have been investigated, the link between these two methods has been missing. The motivation in this paper is to fix this gap and establish links between impossible differential cryptanalysis and integral cryptanalysis.Firstly, by introducing the concept of structure and dual structure, we prove that a → b is an impossible differential of a structure E if and only if it is a zero correlation linear hull of the dual structure E ⊥ . More specifically, constructing a zero correlation linear hull of a Feistel structure with SP -type round function where P is invertible, is equivalent to constructing an impossible differential of the same structure with P T instead of P . Constructing a zero correlation linear hull of an SPN structure is equivalent to constructing an impossible differential of the same structure with (P −1 ) T instead of P . Meanwhile, our proof shows that the automatic search tool presented by Wu and Wang could find all impossible differentials of both Feistel structures with SP -type round functions and SPN structures, which is useful in provable security of block ciphers against impossible differential cryptanalysis.Secondly, by establishing some boolean equations, we show that a zero correlation linear hull always indicates the existence of an integral distinguisher while a special integral implies the existence of a zero correlation linear hull. With this observation we improve the integral distinguishers of Feistel structures by 1 round, build a 24-round integral distinguisher of CAST-256 based on which we propose the best known key recovery attack on reduced round CAST-256 in the non-weak key model, present a 12-round integral distinguisher of SMS4 and an 8-round integral distinguisher of Camellia without F L/F L −1 . Moreover, this result provides a novel way for establishing integral distinguishers and converting known plaintext attacks to chosen plaintext attacks.Finally, we conclude that an r-round impossible differential of E always leads to an r-round integral distinguisher of the dual structure E ⊥ . In the case that E and E ⊥ are linearly equivalent, we derive a direct link between impossible differentials and integral distinguishers of E . Specifically, we obtain that an r-round impossible differential of an SPN structure, which adopts a bit permutation as its linear layer, always indicates the existence of an r-round integral distinguisher. Based on this newly established link, we deduce that impossible differentials of SNAKE(2), PRESENT, PRINCE and ARIA, which are independent of the choices of the S-boxes, always imply the existence of integral distinguishers.Our results could help to classify different cryptanalytic tools. Furthermore, when designing a block cipher, the designers need to demonstrate that the cipher has sufficient security margins against impo...

show abstract

“…6, SET is a tool for the analysis of cryptographic properties of Boolean functions and S-boxes that is written in ANSI C code [23]. 4) Balance -An S-box with n input bits and m output bits, m ≤ n, is balanced if each output occurs 2 n−m times.…”

Section: ) Bit Independence Criterion (Bic) -mentioning

confidence: 99%

Enhancement of Advanced Encryption Standard (AES) Cryptographic Strength via Generation of Cipher Key-Dependent S-Box

Suana¹

2018

IJRASET

View full text Add to dashboard Cite

The rapid increase of information transmitted electronically resulted to an increased reliance on cryptography and authentication. Cryptography is the science of using mathematics to encrypt and decrypt data to store sensitive information or transmit it across insecure networks. Advanced Encryption Standard block cipher (AES) is a widely used cryptographic block cipher system, the AES substitution box (S-Box) are generally inferred as static arrays and publicly known thus making it prone in Differential Fault Analysis (DFA) attacks (also often called side channel attacks). In this paper, a proposed method for constructing dynamic Cipher Key dependent S-box is introduced and implemented to encounter the possible attack on the fixed S -Box. Also, the qualities of the implemented S-boxes are examined based on the four major criteria of a good S-box. A comparative analysis is conducted that compared the randomness properties and simulation time of the proposed AES against the standard AES algorithm. The proposed dynamic key dependent S-box passed the Avalanche, bit independence, non-linearity and balance test which proven its security. Keywords: Cryptography, Encrypt, Decrypt, Networks, Advanced Encryption Standard (AES), Block cipher, Differential Fault Analysis, Substitution box (S-Box). I. INTRODUCTIONThe protection of sensitive information against unauthorized access or fraudulent changes has been of prime concern throughout the centuries. Modern communication techniques, using computers connected through networks, make all data even more vulnerable for these threats [1]. Cryptography plays a critical role in the safety of information. Cryptography enables you to store sensitive information or transmit it across insecure networks (like the Internet) so that it cannot be read by anyone except the intended recipient. While cryptography is the science of securing data, cryptanalysis is the science of analysing and breaking secure communication. Classical cryptanalysis involves an interesting combination of analytical reasoning, application of mathematical tools, pattern finding, patience, determination, and luck. Cryptanalysts are also called attackers [2]. The Encryption technique is employed in two ways, namely Asymmetric Encryption and Symmetric Encryption [3]. Asymmetric Encryption is a relatively new and complex mode of Encryption. Complex because it incorporates two cryptographic keys to implement data security. These keys are called a Public Key and a Private Key. The Public key is available to everyone who wishes to send a message. On the other hand, the private key is kept at a secure place by the owner of the public key [3] Popular asymmetric key encryption algorithm includes EI Gamal, RSA, DSA, Elliptic curve techniques and PKCS. Symmetric encryption is a conventional method of Encryption. It is also the simpler of two techniques. Symmetric encryption is executed by means of only one secret key known as 'Symmetric Key' that is possessed by both parties. This key is applied to encode and decode ...

show abstract

S-box, SET, Match: A Toolbox for S-box Analysis

Cited by 33 publications

References 20 publications

An approach to evaluation of S-boxes

An approach to evaluation of S-boxes

Links Among Impossible Differential, Integral and Zero Correlation Linear Cryptanalysis

Enhancement of Advanced Encryption Standard (AES) Cryptographic Strength via Generation of Cipher Key-Dependent S-Box

Contact Info

Product

Resources

About