计算机应用 ›› 2014, Vol. 34 ›› Issue (1): 73-77.DOI: 10.11772/j.issn.1001-9081.2014.01.0073

• 计算机安全 • 上一篇    下一篇

Zodiac算法的碰撞攻击

刘青1,卫宏儒1,潘伟2   

  1. 1. 北京科技大学 数理学院,北京 100083;
    2. 北京科技大学 基础学科教研室,北京 102100
  • 收稿日期:2013-07-02 修回日期:2013-08-31 出版日期:2014-01-01 发布日期:2014-02-14
  • 通讯作者: 卫宏儒
  • 作者简介:刘青(1989-),女,山西大同人,硕士研究生,主要研究方向:密码学;卫宏儒(1963-),男,陕西宝鸡人,副教授,主要研究方向:数学、信息安全、密码学、物联网;潘伟(1976-),男,北京人,讲师,硕士,主要研究方向:网络、信息安全、物联网。
  • 基金资助:

    国家自然科学基金资助项目;内蒙古自治区科技创新引导奖励基金资助项目

Collision attack on Zodiac algorithm

LIU Qing1,WEI Hongru1,PAN Wei2   

  1. 1. School of Mathematics and Physics, University of Science and Technology Beijing, Beijing 100083, China;
    2. Department of Basic Courses, University of Science and Technology Beijing, Beijing 102100, China
  • Received:2013-07-02 Revised:2013-08-31 Online:2014-01-01 Published:2014-02-14
  • Contact: WEI Hongru

摘要: 为了研究Zodiac算法抵抗碰撞攻击的能力,根据算法的一个等价结构,分别给出了Zodiac算法的两个8轮和9轮区分器。通过在此区分器前后加适当的轮数,首先,利用9轮区分器对12轮到16轮的算法进行了碰撞攻击,其攻击的数据复杂度分别为215,231.2,231.5,231.7,263.9,时间复杂度分别为233.8,249.9,275.1,2108,2140.1;其次,利用8轮区分器对全轮算法进行了攻击,其攻击的数据复杂度和时间复杂度分别为260.6和2173.9。结果表明:全轮的Zodiac-192/256算法均不能抵抗碰撞攻击。

关键词: Zodiac算法, 碰撞攻击, 等价结构, 区分器, 数据复杂度, 时间复杂度

Abstract: In order to research the ability of Zodiac algorithm against the collision attack, two 8-round and 9-round distinguishers of Zodiac algorithm based on an equivalent structure of it were proposed. Firstly, collision attacks were applied to the algorithm from 12-round to 16-round by adding proper rounds before or after the 9-round distinguishers. The data complexities were 215, 231.2, 231.5, 231.7and 263.9, and the time complexities were 233.8, 249.9, 275.1, 2108and 2140.1, respectively. Then the 8-round distinguishers were applied to the full-round algorithm. The data complexity and time complexity were 260.6 and 2173.9, respectively. These results show that both full-round Zodiac-192 and full-round Zodiac-256 are not immune to collision attack.

Key words: Zodiac algorithm, collision attack, equivalent structure, distinguisher, data complexity, time complexity

中图分类号: