CAJ | 학술논문

Vaudenay(1999)从伪随机性的角度出发，证明了Lai-Massey模型中的s变换应设计为正型置换或几乎正型置换。该文从抗差分攻击和线性攻击的角度重新考察了Lai-Massey模型双射s的设计问题。证明了基于任意有限交换群设计的Lai-Massey模型，如果s变换设计为该群上的仿射变换，则必须为正型置换，否则该算法将分别存在概率为1的差分对应和线性逼近，结论表明仿射的几乎正型置换并不适用于Lai-Massey模型的设计。此外，该文借助有限群的特征标引入了一种新的线性逼近方式，收集和刻画了一般有限交换群上Lai-Massey模型输入和输出的线性逼近关系。
Vaudenay(1999)종위수궤성적각도출발，증명료Lai-Massey모형중적s변환응설계위정형치환혹궤호정형치환。해문종항차분공격화선성공격적각도중신고찰료Lai-Massey모형쌍사s적설계문제。증명료기우임의유한교환군설계적Lai-Massey모형，여과s변환설계위해군상적방사변환，칙필수위정형치환，부칙해산법장분별존재개솔위1적차분대응화선성핍근，결론표명방사적궤호정형치환병불괄용우Lai-Massey모형적설계。차외，해문차조유한군적특정표인입료일충신적선성핍근방식，수집화각화료일반유한교환군상Lai-Massey모형수입화수출적선성핍근관계。
Vaudenay (1999) proved that the permutationσin Lai -Massey scheme should be an orthomorphism or almost orthomorphism. This paper mainly focuses on the principle of the functionsin Lai-Massey scheme, which is described by its resistance to differential and linear attack. It shows that no matter how the group G is defined, if sis an affine function on G, then it should be defined as an orthomorphism, or else there exists a differentially characteristic with probability 1 and a linearly approximation with correlation coefficient 1, therefore it has potential security risk. Moreover, by the characteristic spectrum in finite group, a new linear relationship between the input and output of Lai-Massey scheme is introduced, which is used to describe the linear relationship lying between the input and the output of Lai-Massey scheme.