Integral and Multidimensional Linear Distinguishers with Correlation Zero

Andrey Bogdanov, Gregor Leander, Kaisa Nyberg, Meiqin Wang

Research output: Chapter in Book/Report/Conference proceedingArticle in proceedingsResearchpeer-review

Abstract

Zero-correlation cryptanalysis uses linear approximations holding with probability exactly 1/2. In this paper, we reveal fundamental links of zero-correlation distinguishers to integral distinguishers and multidimensional linear distinguishers. We show that an integral implies zero-correlation linear approximations and that a zero-correlation linear distinguisher is actually a special case of multidimensional linear distinguishers. These observations provide new insight into zero-correlation cryptanalysis which is illustrated by attacking a Skipjack variant and round-reduced CAST-256 without weak key assumptions. © International Association for Cryptologic Research 2012.
Original languageEnglish
Title of host publicationAdvances in Cryptology – ASIACRYPT 2012
EditorsXiaoyun Wang, Kazue Sako
PublisherSpringer
Publication date2012
Pages244-261
ISBN (Print)978-3-642-34960-7
ISBN (Electronic)978-3-642-34961-4
DOIs
Publication statusPublished - 2012
Event18th International Conference on the Theory and Application of Cryptology and Information Security - Beijing, China
Duration: 2 Dec 20126 Dec 2012
Conference number: 18

Conference

Conference18th International Conference on the Theory and Application of Cryptology and Information Security
Number18
Country/TerritoryChina
CityBeijing
Period02/12/201206/12/2012
SeriesLecture Notes in Computer Science
Volume7658
ISSN0302-9743

Keywords

  • Security of data
  • Cryptography

Fingerprint

Dive into the research topics of 'Integral and Multidimensional Linear Distinguishers with Correlation Zero'. Together they form a unique fingerprint.

Cite this