软件学报
軟件學報
연건학보
JOURNAL OF SOFTWARE
2013年
6期
1324-1333
,共10页
密码分析%猜测决定攻击%SNOW3G%ZUC%3GPP
密碼分析%猜測決定攻擊%SNOW3G%ZUC%3GPP
밀마분석%시측결정공격%SNOW3G%ZUC%3GPP
cryptanalysis%Guess and Determine attack%SNOW3G%ZUC%3GPP
SNOW3G流密码算法是3G Partnership Project(3GPP)中实现数据保密性和数据完整性的标准算法UEA2&UIA2的核心,ZUC是3GPP中加密算法128-EEA3和完整性保护算法128-EIA3的核心.至今还没有针对SNOW3G进行猜测决定攻击的研究结果出现.对SNOW3G进行了猜测决定攻击,其计算复杂度为2320,所需数据量为9个32比特密钥字.通过对ZUC算法设计的分析,将ZUC算法中基于32比特字的非线性函数转化为基于16比特半字的非线性函数,提出了基于16比特半字的猜测决定攻击,其计算复杂度为2392,所需数据量为9个32比特密钥字,该结果优于已有的针对ZUC的猜测决定攻击.分析结果表明,尽管ZUC算法的内部状态规模小于SNOW3G,在抵抗猜测决定攻击方面,ZUC明显优于SNOW3G.
SNOW3G流密碼算法是3G Partnership Project(3GPP)中實現數據保密性和數據完整性的標準算法UEA2&UIA2的覈心,ZUC是3GPP中加密算法128-EEA3和完整性保護算法128-EIA3的覈心.至今還沒有針對SNOW3G進行猜測決定攻擊的研究結果齣現.對SNOW3G進行瞭猜測決定攻擊,其計算複雜度為2320,所需數據量為9箇32比特密鑰字.通過對ZUC算法設計的分析,將ZUC算法中基于32比特字的非線性函數轉化為基于16比特半字的非線性函數,提齣瞭基于16比特半字的猜測決定攻擊,其計算複雜度為2392,所需數據量為9箇32比特密鑰字,該結果優于已有的針對ZUC的猜測決定攻擊.分析結果錶明,儘管ZUC算法的內部狀態規模小于SNOW3G,在牴抗猜測決定攻擊方麵,ZUC明顯優于SNOW3G.
SNOW3G류밀마산법시3G Partnership Project(3GPP)중실현수거보밀성화수거완정성적표준산법UEA2&UIA2적핵심,ZUC시3GPP중가밀산법128-EEA3화완정성보호산법128-EIA3적핵심.지금환몰유침대SNOW3G진행시측결정공격적연구결과출현.대SNOW3G진행료시측결정공격,기계산복잡도위2320,소수수거량위9개32비특밀약자.통과대ZUC산법설계적분석,장ZUC산법중기우32비특자적비선성함수전화위기우16비특반자적비선성함수,제출료기우16비특반자적시측결정공격,기계산복잡도위2392,소수수거량위9개32비특밀약자,해결과우우이유적침대ZUC적시측결정공격.분석결과표명,진관ZUC산법적내부상태규모소우SNOW3G,재저항시측결정공격방면,ZUC명현우우SNOW3G.
SNOW3G stream cipher is the core of the standardized 3G Partnership Project (3GPP) confidentiality and integrity algorithms UEA2 & UIA2 while ZUC stream cipher is the core of the standardized 3GPP confidentiality and integrity algorithms 128-EEA3 &128-EIA3. So far, there have been no Guess and Determine attacks applied to SNOW3G. In this paper, a Guess and Determine attack on SNOW3G is proposed with a computational complexity of 2320, requiring 9 keystream words (each word consists of 32 bits). After analyzing the design of ZUC, a half-word-based Guess and Determine attack on ZUC is introduced, based on transforming the word-based nonlinear function of ZUC into a half-word-based nonlinear function. The attack on ZUC has a computational complexity of 2392 and requires 9 keystream words, which is better than the previous Guess and Determine attack on ZUC. These results show that ZUC has much better resistance against Guess and Determine attack than SNOW 3G, though the internal state size of ZUC is smaller than SNOW 3G.