The fundamental problem of differential cryptanalysis is to find the highest entries in the Difference Distribution Table (DDT) of a given mapping F over n-bit values, and in particular to find the highest diagonal entries which correspond to the best iterative characteristics of F. The standard bottom-up approach to this problem is to consider all the internal components of the mapping along some differential characteristic, and to multiply their transition probabilities. However, this can provide seriously distorted estimates since the various events can be dependent, and there can be a huge number of low probability characteristics contributing to the same high probability entry. In this paper we use a top-down approach which considers the given mapping as a black box, and uses only its input/output relations in order to obtain direct experimental estimates for its DDT entries which are likely to be much more accurate. In particular, we describe three new techniques which reduce the time complexity of three crucial aspects of this problem: Finding the exact values of all the diagonal entries in the DDT for small values of n, approximating all the diagonal entries which correspond to low Hamming weight differences for large values of n, and finding an accurate approximation for any DDT entry whose large value is obtained from many small contributions. To demonstrate the potential contribution of our new techniques, we apply them to the SIMON family of block ciphers, show experimentally that most of the previously published bottom-up estimates of the probabilities of various differentials are off by a significant factor, and describe new differential properties which can cover more rounds with roughly the same probability for several of its members.
|Title of host publication||Progress in Cryptology – LATINCRYPT 2015 - 4th International Conference on Cryptology and Information Security in Latin America, Proceedings|
|Editors||Francisco Rodríguez-Henríquez, Kristin Lauter|
|Number of pages||18|
|State||Published - 2015|
|Event||4th International Conference on Cryptology and Information Security in Latin America, LATINCRYPT 2015 - Guadalajara, Mexico|
Duration: 23 Aug 2015 → 26 Aug 2015
|Name||Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)|
|Conference||4th International Conference on Cryptology and Information Security in Latin America, LATINCRYPT 2015|
|Period||23/08/15 → 26/08/15|
Bibliographical noteFunding Information:
O. Dunkelman—The second author was supported in part by the Israel Science Foundation through grants No. 827/12 and No. 1910/12.
© Springer International Publishing Switzerland 2015.
- Difference distribution tables
- Differential cryptanalysis
- Iterative characteristics
ASJC Scopus subject areas
- Theoretical Computer Science
- Computer Science (all)