Abstract
This paper introduces a practical algorithm for deriving the best differential characteristic and the best linear expression of DES. Its principle is based on a duality between differential cryptanalysis and linear cryptanalysis, and applicable to various block ciphers. Then using this program, we observe how the order of S-boxes affects the strength of DES. We show that the order of the S-boxes is well-arranged against differential cryptanalysis, though it is not the best choice. On the other hand, our experimental results indicate that it is a very weak choice in regard to linear cryptanalysis. In other words, DES can be strengthened by just rearranging the order of the S-boxes.
Chapter PDF
References
Biham, E., Shamir, A.: Differential Cryptanalysis of the Data Encryption Standard. Springer-Verlag (1993)
Matsui, M.: Linear Cryptanalysis Method of DES Cipher. Advances in Cryptology — Eurocrypt'93, Lecture Notes in Computer Science 765 (1993) 386–397
Biham, B.: On Matsui's Linear Cryptanalysis. Pre-proceedings of Eurocrypt'94 (1994) 349–361
Knudsen, L.R.: Iterative Characteristics of DES and s 2-DES. Advances in Cryptology — Crypto'92, Lecture Notes in Computer Science 740 (1992)
Author information
Authors and Affiliations
Editor information
Rights and permissions
Copyright information
© 1995 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Matsui, M. (1995). On correlation between the order of S-boxes and the strength of DES. In: De Santis, A. (eds) Advances in Cryptology — EUROCRYPT'94. EUROCRYPT 1994. Lecture Notes in Computer Science, vol 950. Springer, Berlin, Heidelberg. https://doi.org/10.1007/BFb0053451
Download citation
DOI: https://doi.org/10.1007/BFb0053451
Published:
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-540-60176-0
Online ISBN: 978-3-540-44717-7
eBook Packages: Springer Book Archive