|
This article is cited in 1 scientific paper (total in 1 paper)
Mathematical Methods of Cryptography
Calculation of the differential probabilities for the sum of $k$ numbers modulo $2^n$
A. S. Mokrousov Novosibirsk State University
Abstract:
We study the differential probabilities $\mathrm{xdp}_{\mathrm{k}}^+(\alpha^1, \dots, \alpha^k \to \alpha^0)$ of the function $f(x_1,\dots, x_k) = x_1 + \dots + x_k \mod 2^n$, $\alpha^0, \alpha^1, \dots, \alpha^k \in \mathbb{Z}_2^n$, where differences are expressed using bitwise “exclusive or”. These values are used in differential cryptanalysis of cryptographic primitives which contain bitwise “exclusive or” and addition modulo $2^n$, such as ARX-constructions. We propose analytic expressions of matrices that are used for calculating $\mathrm{xdp}_{\mathrm{k}}^+$. We also study the differential probability $\mathrm{adp}^{\oplus}(\alpha, \beta \to \gamma)$ of the function $x \oplus y$, $\alpha, \beta, \gamma \in \mathbb{Z}_2^n$, where differences are expressed using addition modulo $2^n$, and describe all triples of differences whose probabilities are greater than ${1}/{4}$.
Keywords:
ARX, exclusive or, modular addition, differential cryptanalysis, differential probabilities.
Citation:
A. S. Mokrousov, “Calculation of the differential probabilities for the sum of $k$ numbers modulo $2^n$”, Prikl. Diskr. Mat. Suppl., 2022, no. 15, 54–57
Linking options:
https://www.mathnet.ru/eng/pdma579 https://www.mathnet.ru/eng/pdma/y2022/i15/p54
|
|