华南理工大学学报(自然科学版) ›› 2008, Vol. 36 ›› Issue (5): 53-57,64.

• 计算机科学与技术 • 上一篇    下一篇

低轮AES的插值攻击方法

肖皇培张国基黄莹莹2   

  1. 1. 华南理工大学 计算机科学与工程学院, 广东 广州 510640;2. 华南理工大学 数学科学学院, 广东 广州 510640
  • 收稿日期:2007-07-03 修回日期:2007-10-31 出版日期:2008-05-25 发布日期:2008-05-25
  • 通信作者: 肖皇培(1979-),男,博士生,主要从事密码学与信息安全方面的研究. E-mail:xiaohp_2000@163.com
  • 作者简介:肖皇培(1979-),男,博士生,主要从事密码学与信息安全方面的研究.

Interpolation Attack Method of Round-Reduced AES

Xiao Huang-pei1  Zhang Guo-ji2  Huang Ying-ying2   

  1. 1.School of Computer Science and Engineering,South China University of Technology,Guangzhou 510640,Guangdong,China;2.School of Mathematical Sciences,South China University of Technology,Guangzhou 510640,Guangdong,China
  • Received:2007-07-03 Revised:2007-10-31 Online:2008-05-25 Published:2008-05-25
  • Contact: 肖皇培(1979-),男,博士生,主要从事密码学与信息安全方面的研究. E-mail:xiaohp_2000@163.com
  • About author:肖皇培(1979-),男,博士生,主要从事密码学与信息安全方面的研究.

摘要: 针对AES(Advanced Encryption Standard)算法3轮加密后的密文代数表达式具有的次数较低(低于255)的特点,提出了低轮AES密码的插值攻击方法.该方法利用255个函数值可惟一求出254次多项式的拉格朗日插值公式.文中分析了AES加密算法中的密文代数表达式,并给出了相应的结论及证明.利用此攻击方法,通过选取28对明密文,即可还原4轮AES的密钥,利用211对明密文,可成功破译5轮AES密码,并可把此攻击扩展到6轮AES密码.

关键词: 密码学, 分组密码, 插值攻击, 高级加密标准

Abstract:

Due to the property that the 3-round Advanced Encryption Standard(AES) ciphertexts have a polyno-mial expression with a low degree of less than 255,a method of interpolation attack on the round-reduced AES is presented,that is,through the Lagrange interpolation formula,the polynomial with 254 degrees can be obtained using 255 values.The algebraic representation of the AES on its plaintexts and ciphertexts is then studied,and the relevant results and the corresponding proofs are also given.According to the proposed attack method,the key of 4-round AES cipher is found using only 2^8 chosen plaintexts,and the key of 5-round AES cipher is successfully broken using 2^11 chosen plaintexts.Moreover,this attack method can be extended to the 6-round AES cipher.

Key words: cryptography, block cipher, interpolation attack, Advanced Encryption Standard