Statistical Model of Correlation Difference and Related-Key Linear Cryptanalysis

Authors

  • Kaisa Nyberg Aalto University School of Science, Espoo, Finland

DOI:

https://doi.org/10.46586/tosc.v2021.i4.124-137

Keywords:

block cipher, linear cryptanalysis, related-key attack, statistical model

Abstract

The goal of this work is to propose a related-key model for linear cryptanalysis. We start by giving the mean and variance of the difference of sampled correlations of two Boolean functions when using the same sample of inputs to compute both correlations. This result is further extended to determine the mean and variance of the difference of correlations of a pair of Boolean functions taken over a random data sample of fixed size and over a random pair of Boolean functions. We use the properties of the multinomial distribution to achieve these results without independence assumptions. Using multivariate normal approximation of the multinomial distribution we obtain that the distribution of the difference of related-key correlations is approximately normal. This result is then applied to existing related-key cryptanalyses. We obtain more accurate right-key and wrong-key distributions and remove artificial assumptions about independence of sampled correlations. We extend this study to using multiple linear approximations and propose a Χ2-type statistic, which is proven to be Χ2 distributed if the linear approximations are independent. We further examine this statistic for multidimensional linear approximation and discuss why removing the assumption about independence of linear approximations does not work in the related-key setting the same way as in the single-key setting.

Downloads

Published

2021-12-03

Issue

Section

Articles

How to Cite

Statistical Model of Correlation Difference and Related-Key Linear Cryptanalysis. (2021). IACR Transactions on Symmetric Cryptology, 2021(4), 124-137. https://doi.org/10.46586/tosc.v2021.i4.124-137