对块零的新攻击被介绍,它是 termedlinear 微分的密码翻译法。它基于联合线性密码翻译法和 differentialcryptanalysis,并且由使用线性微分的概率(LDP ) 工作。而且,我们在场为 2 的最大的线性微分的概率(MLDP ) 绕行的为上面的跳的 newmethod ofsubstitution 排列网络(SPN ) 零结构。当我们的结果适用于 2 回合 advancedencryption 标准(AES ) 时, MLDP 的上面的界限直到 1.68x2 ~(19 ) ,这被显示出, whichextends 2 回合 SPN 的已知的结果。而且,当使用一种递归的技术时,为 4 轮 AES 的 MLDP 被 2 ~(73 ) 围住的 weobtain。
A new attack on block ciphers is introduced, which is termed linear-differential cryptanalysis. It bases the combining of linear cryptanalysis and differential cryptanalysis, and works by using linear-differential probability (LDP). Moreover, we present a new method for upper bounding the maximum linear-differential probability (MLDP) for 2 rounds of substitution permutation network (SPN) cipher structure. When our result applies to 2-round advanced encryption standard(AES), It is shown that the upper bound of MLDP is up to 1.68×2^-19, which extends the known results for the 2-round SPN. Furthermore, when using a recursive technique, we obtain that the MLDP for 4 rounds of AES is bounded by 2^-73.