An Optimal Sampling Technique for Distinguishing Random S-boxes
(2012) ISIT 2012 p.846-850- Abstract
- The nonrandom behavior of the outputs of a random S-box can be exploited when constructing distinguishers for cryptographic primitives. Different methods of constructing samples from the outputs have been used in the literature. However, it has been unclear exactly how these methods differ and which method is optimal. We analyze four different sampling techniques. We prove that two of these sampling techniques result in dependent samples. We further show one sampling technique that is optimal in terms of error probabilities in the resulting distinguisher. However, this sampling technique is quite impractical as it requires very large storage. We further show a fourth sampling technique that is much more practical, and we prove that it is... (More)
- The nonrandom behavior of the outputs of a random S-box can be exploited when constructing distinguishers for cryptographic primitives. Different methods of constructing samples from the outputs have been used in the literature. However, it has been unclear exactly how these methods differ and which method is optimal. We analyze four different sampling techniques. We prove that two of these sampling techniques result in dependent samples. We further show one sampling technique that is optimal in terms of error probabilities in the resulting distinguisher. However, this sampling technique is quite impractical as it requires very large storage. We further show a fourth sampling technique that is much more practical, and we prove that it is equivalent to the optimal one. We also show an improved algorithm for calculating the associated probability distributions that are required for the attack. (Less)
Please use this url to cite or link to this publication:
https://lup.lub.lu.se/record/2701859
- author
- Stankovski, Paul LU and Hell, Martin LU
- organization
- publishing date
- 2012
- type
- Chapter in Book/Report/Conference proceeding
- publication status
- published
- subject
- host publication
- Information Theory Proceedings (ISIT), 2012 IEEE International Symposium on
- editor
- Viswanath, Pramod
- pages
- 5 pages
- publisher
- IEEE - Institute of Electrical and Electronics Engineers Inc.
- conference name
- ISIT 2012
- conference dates
- 2012-07-01 - 2012-07-06
- external identifiers
-
- wos:000312544300172
- scopus:84867528737
- ISSN
- 2157-8095
- 2157-8117
- ISBN
- 978-1-4673-2578-3
- 978-1-4673-2580-6
- DOI
- 10.1109/ISIT.2012.6284680
- language
- English
- LU publication?
- yes
- id
- 41f77893-ea42-4ead-b830-c442319d72ba (old id 2701859)
- date added to LUP
- 2016-04-04 07:02:40
- date last changed
- 2024-06-11 16:59:52
@inproceedings{41f77893-ea42-4ead-b830-c442319d72ba, abstract = {{The nonrandom behavior of the outputs of a random S-box can be exploited when constructing distinguishers for cryptographic primitives. Different methods of constructing samples from the outputs have been used in the literature. However, it has been unclear exactly how these methods differ and which method is optimal. We analyze four different sampling techniques. We prove that two of these sampling techniques result in dependent samples. We further show one sampling technique that is optimal in terms of error probabilities in the resulting distinguisher. However, this sampling technique is quite impractical as it requires very large storage. We further show a fourth sampling technique that is much more practical, and we prove that it is equivalent to the optimal one. We also show an improved algorithm for calculating the associated probability distributions that are required for the attack.}}, author = {{Stankovski, Paul and Hell, Martin}}, booktitle = {{Information Theory Proceedings (ISIT), 2012 IEEE International Symposium on}}, editor = {{Viswanath, Pramod}}, isbn = {{978-1-4673-2578-3}}, issn = {{2157-8095}}, language = {{eng}}, pages = {{846--850}}, publisher = {{IEEE - Institute of Electrical and Electronics Engineers Inc.}}, title = {{An Optimal Sampling Technique for Distinguishing Random S-boxes}}, url = {{https://lup.lub.lu.se/search/files/188871024/optimal_sampling_ieee.pdf}}, doi = {{10.1109/ISIT.2012.6284680}}, year = {{2012}}, }