Computing Expected Differential Probability of (Truncated) Differentials and Expected Linear Potential of (Multidimensional) Linear Hulls in SPN Block Ciphers

Maria Eichlseder, Gregor Leander, Shahram Rasoolzadeh

Research output: Chapter in Book/Report/Conference proceedingConference paperpeer-review

Abstract

In this paper we introduce new algorithms that, based only on the independent round keys assumption, allow to practically compute the exact expected differential probability of (truncated) differentials and the expected linear potential of (multidimensional) linear hulls. That is, we can compute the exact sum of the probability or the potential of all characteristics that follow a given activity pattern. We apply our algorithms to various recent SPN ciphers and discuss the results.
Original languageEnglish
Title of host publicationProgress in Cryptology – INDOCRYPT 2020 - 21st International Conference on Cryptology in India 2020, Proceedings
EditorsKarthikeyan Bhargavan, Elisabeth Oswald, Manoj Prabhakaran
PublisherSpringer, Cham
Pages345-369
Number of pages25
ISBN (Electronic)978-3-030-65277-7
ISBN (Print)978-3-030-65276-0
DOIs
Publication statusPublished - 2020
Event21st International Conference on Cryptology in India - Virtuell, India
Duration: 13 Dec 202016 Dec 2020

Publication series

NameLecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume12578 LNCS
ISSN (Print)0302-9743
ISSN (Electronic)1611-3349

Conference

Conference21st International Conference on Cryptology in India
Abbreviated titleIndocrypt 2020
Country/TerritoryIndia
CityVirtuell
Period13/12/2016/12/20

Keywords

  • Multidimensional linear hull
  • SPN cipher
  • Truncated differential

ASJC Scopus subject areas

  • Theoretical Computer Science
  • Computer Science(all)

Fingerprint

Dive into the research topics of 'Computing Expected Differential Probability of (Truncated) Differentials and Expected Linear Potential of (Multidimensional) Linear Hulls in SPN Block Ciphers'. Together they form a unique fingerprint.

Cite this