低轮PUFFIN算法的积分攻击

摘要

PUFFIN是一个分组长度为64bit的轻量级分组密码算法，其密钥长度为128bit。对PUFFIN抵抗积分攻击的能力进行研究，构造并证明PUFFIN算法存在5轮和6轮积分区分器。利用6轮积分区分器对8轮PUFFIN进行积分攻击，可恢复2轮共100bit轮密钥，攻击的数据复杂度为220个选择明文，时间复杂度约为233次8轮加密，存储复杂度为220，这是目前为止对PUFFIN最好的积分分析结果。%PUFFIN is a lightweight block cipher,in which the block length is 64 bit while the key size is 128 bit.The integral cryptanalysis resistance ability of PUFFIN was analyzed.The existence of 5 and 6 round integral distinguisher in PUFFIN was constructed and proved.An integral attack on 8 round PUFFIN was mounted by 6 round integral distinguisher to recover 2 round 100 bit round cipher.The data complexity of the attack is 220 chosen plaintexts,the time complexity is about 233 8 round encryptions,and the space complexity is 220 .This has been the best integral attack on PUFFIN up to now.