SLIDE 1 Provable Security of (Tweakable) Block Ciphers Based on Substitution-Permutation Networks
Benoit Cogliati Yevgeniy Dodis Jonathan Katz Jooyoung Lee John Steinberger Aishwarya Thiruvengadam Zhe Zhang John Steinberger Aishwarya Thiruvengadam Zhe Zhang
1
SLIDE 2 Block Ciphers
- Building block for many cryptographic constructions
Hash functions
- Hash functions
- Encryption schemes
- Message authentication codes
- Keyed permutations
- Popular Design Paradigms
- Feistel Networks
- Feistel Networks
- Substitution-Permutation Networks
2
SLIDE 3 Block Ciphers: Designs
Feistel Network
- Feistel Network
- Eg: DES
- Substitution-Permutation Network (SPN)
- Eg: AES
SLIDE 4
Feistel Network
Block Ciphers: Designs
- Feistel Network
- Eg: DES
- Long line of work analyzing provable security of Feistel [LR88, Pat03,
Pat04]
- Security been studied in various security models [Pat10, HR10, HKT11,
Tes14, CHKPST16]
- Substitution-Permutation Network (SPN)
- Substitution-Permutation Network (SPN)
- Eg: AES
- In contrast, provable security of SPNs not as well-studied
SLIDE 5
Related Work
SLIDE 6
Related Work
SLIDE 7
Substitution-Permutation Network (SPN)
SLIDE 8 Substitution-Permutation Network (SPN)
. . .
SLIDE 9 Substitution-Permutation Network (SPN)
. . .
SLIDE 10
Substitution-Permutation Network (SPN)
SLIDE 11 Substitution-Permutation Network (SPN)
. . .
SLIDE 12 Substitution-Permutation Networks
Substitution- Permutation step
SLIDE 13
Security of SPNs
SLIDE 14 Security of SPNs
14
SLIDE 15 Security of SPNs
15
SLIDE 16 Security of SPNs
16
SLIDE 17 Security of SPNs
17
SLIDE 18 Categorizing SPNs
Linear function
SLIDE 19
Categorizing SPNs
SLIDE 20 Categorizing SPNs
Non-linear function
SLIDE 21
Results: Linear SPNs
SLIDE 22
Results: Non-linear SPNs
SLIDE 23
Interpreting our Results
SLIDE 24
Interpreting our Results
SLIDE 25
Results
SLIDE 26
Constructing Non-linear SPNs
SLIDE 27
Constructing Non-linear SPNs: Blockwise Universal Permutations
SLIDE 28
Constructing Non-linear SPNs: Blockwise Universal Permutations
SLIDE 29
Constructing Non-linear SPNs: Blockwise Universal Permutations
SLIDE 30 Non-linear SPNs via Blockwise Universal Permutations
. . .
SLIDE 31 Non-linear SPNs via Blockwise Universal Permutations
. . .
SLIDE 32
Non-linear SPNs via Blockwise Universal Permutations
SLIDE 33
Results
SLIDE 34
Security of 3-round linear SPN
SLIDE 35
Security of 3-round Linear SPNs
SLIDE 36
Results
SLIDE 37
Takeaway
SLIDE 38
Thank You
SLIDE 39
Constructing Non-linear SPNs
SLIDE 40 SPNs: Applications
1-round SPN
SLIDE 41
Constructing Non-linear SPNs: Blockwise Universal Permutations