The Independence of Linear Approximations in Symmetric Cryptanalysis

摘要

A theoretical framework for the use of multiple linear approximations in the linear cryptanalysis of block ciphers is given. The covariance of two mask counts is derived, and it is shown that under appropriate conditions the mask counts in linear cryptanalysis are stochastically independent, whether or not the masks are linearly independent. Some consequences of these observations are also considered