Description
S-Boxes are essential objects in the conception of blockciphers. Typically, an S-Box is simply a permutation (bijective function) on n bits, with n small (usually 4 or 8). Its role in a blockcipher is to bring nonlinearity to the cipher, thus an S-Box must be highly nonlinear. Several parameters of a function are used to measure nonlinearity, among which the most important are differential uniformity and nonlinearity. Although we know a few permutations with good differential uniformity and nonlinearity any number of bits, implementing such S-Boxes has a high cost in general. Therefore, an important problem in symmetric cryptography is to find S-Boxes with good cryptographic parameters (differential uniformity, nonlinearity) with a low implementation cost (which implies a structure). In this presentation, we will address this problem by analyzing a few structures (Feistel, MISTY, Butterfly) which yield a low implementation cost while allowing for some cryptographically strong S-Boxes.
Prochains exposés
-
Polytopes in the Fiat-Shamir with Aborts Paradigm
Orateur : Hugo Beguinet - ENS Paris / Thales
The Fiat-Shamir with Aborts paradigm (FSwA) uses rejection sampling to remove a secret’s dependency on a given source distribution. Recent results revealed that unlike the uniform distribution in the hypercube, both the continuous Gaussian and the uniform distribution within the hypersphere minimise the rejection rate and the size of the proof of knowledge. However, in practice both these[…]-
Cryptographie
-
Primitive asymétrique
-
Mode et protocole
-
-
Post-quantum Group-based Cryptography
Orateur : Delaram Kahrobaei - The City University of New York