CAJ | 학술논문

Grain算法是欧洲序列密码工程eSTREAM最终入选的面向硬件实现的3个序列密码算法之一，它由2个反馈移存器和前馈函数组成，能有效抵御基于线性反馈移存器的序列密码攻击。针对以Grain算法为特例的Grain型级联反馈移存器的非奇异性判定问题，给出Grain型级联反馈移存器在初始化过程和密钥流生成过程中，状态刷新变换均构成双射的充分条件，并通过反例说明对于有限域上的Grain型级联反馈移存器，即使所使用的2个移存器都是非奇异的，并且前馈函数满足相应性质，其状态刷新变换仍可能不构成双射。利用Grain v1算法验证了该非奇异性判定结果的正确性。
Grain산법시구주서렬밀마공정eSTREAM최종입선적면향경건실현적3개서렬밀마산법지일，타유2개반궤이존기화전궤함수조성，능유효저어기우선성반궤이존기적서렬밀마공격。침대이Grain산법위특례적Grain형급련반궤이존기적비기이성판정문제，급출Grain형급련반궤이존기재초시화과정화밀약류생성과정중，상태쇄신변환균구성쌍사적충분조건，병통과반례설명대우유한역상적Grain형급련반궤이존기，즉사소사용적2개이존기도시비기이적，병차전궤함수만족상응성질，기상태쇄신변환잉가능불구성쌍사。이용Grain v1산법험증료해비기이성판정결과적정학성。
Grain cipher is one of the 3 final hardware-oriented stream ciphers of the eSTREAM project, it is based on two feedback shift registers and a filtering function, and it can effectively resist stream cipher attacks based on linear feedback shift register. In this paper, the nonsingularity of the Grain-like cascade feedback shift registers is investigated, the sufficient conditions of state refresh transformations in initialization phase and key stream generation phase being bijective is given. As a counterexample, for the word-oriented Grain-like cascade feedback shift registers, even if the two feedback shift registers are both nonsingular, and the filtering function satisfies proper conditions, the state update transformation can also be nonbijective. It proves the result of criteria for nonsingularity by using Grain v1 algorithm.