«上一篇/Previous Article|本期目录/Table of Contents|下一篇/Next Article»

《计算机技术与发展》[ISSN:1006-6977/CN:61-1281/TN]

卷:

期数:

2025年03期

页码:

91-98

栏目:

网络空间安全

出版日期:

2025-03-10

文章信息/Info

Title:

A Design Method of 16-bit S-box with High Flexibility

文章编号:

1673-629X(2025)03-0091-08

作者:

闫庆文; 郭影*; 刘文芬; 陈文; 陆永灿

桂林电子科技大学 广西密码学与信息安全重点实验室,广西 桂林 541004

Author(s):

YAN Qing-wen; GUO Ying*; LIU Wen-fen; CHEN Wen; LU Yong-can

Guangxi Key Laboratory of Cryptography and Information Security,Guilin University of Electronic Technology,Guilin 541004,China

关键词:

S盒; 灵活性; 仿射等价; GPU技术; 差分均匀度

Keywords:

S-box; flexibility; affine equivalence; graphics processing unit technique; differential uniformity

分类号:

TP309.7

DOI:

10.20165/j.cnki.ISSN1673-629X.2024.0339

摘要:

S 盒作为分组密码的主要非线性部件,是决定算法整体安全性的关键。 当前,基于代换-置换-代换(SPS)结构和非线性反馈移位寄存器(NFSR)构造 16 比特 S 盒是两种主流方法,但存在差分/ 线性性质弱、迭代轮数多的问题。 基于此,提出了一种密码学性质良好、迭代轮数较少的 S 盒设计方法。 此外,现有的 S 盒设计较少关注灵活性。 该文提出的 16 比特 S 盒设计方案在整体架构及核心部件的选择上具有高度灵活的特点,可以充分满足这一需求。 进一步地,为解决 16 比特 S 盒安全评估效率低的问题,采用预存储优化算法及 GPU 技术加速求解,显著降低了计算的时间复杂度。 实验结果表明,新构造的 S 盒密码学性质表现良好。 最优 S 盒的代数次数为 14,差分均匀度为 20,非线性度为 32 000,透明阶值为15.981 7,严格雪崩准则度为 0. 498 0。 将该 S 盒应用于 NBC 和 Piccolo 算法时,降低了两者抵抗经典攻击的最小安全界轮数,验证了 S 盒具有较高的安全级别,可以为密码算法的设计提供非线性部件支持。

Abstract:

As the main nonlinear component of block cipher, the S - box is key to determining the algorithm’s security. At present,constructing 16-bit S-boxes based on SPS structure and NFSR are two mainstream methods,but they suffer from weak differential / linear properties and multiple iteration rounds. Based on this,a design method of 16-bit S-boxes with better cryptographic properties and fewer iteration rounds is proposed. In addition,existing S-box designs focus less on flexibility. The proposed 16-bit S-box design is highly flexible in terms of architecture and the selection of core components,which can fully meet this demand. Furthermore,to address the inef-ficiency of 16 - bit S - boxes security evaluation, a pre - storage optimization algorithm, and GPU parallel technology are adopted to accelerate the solution, which significantly reduces the time complexity of calculation. Experimental results indicate that the newly constructed S-boxes exhibit robust cryptographic properties. The optimal S-box has an algebraic degree of 14,the differential uniformity is 20,the nonlinearity is 32 000,the transparency order value is 15. 981 7,and the strict avalanche criterion degree is 0. 498 0. When the S-box is applied to NBC and Piccolo algorithms,the minimum number of security rounds for both to resist classical attacks is reduced,which verifies that the S-box has a high-security level and can provide nonlinear component support for the design of cryptographic algo-rithms.

常用功能

更新日期/Last Update: 2025-03-10