9.10 DIFFERENTIAL CRYPTANALYSIS

Suppose two plaintexts are enciphered by S-box S[0] with the same key.

image

We conclude that

image

and write this last relationship as

image

where

image

How much of the 6-bit key is revealed by corresponding pairs of plain- and ciphertext (xi, yi) (i = 1, 2) enciphered by S-box S[0] with the same unknown key? That is, how many solutions are there to

image

given

image

Define

image

A pair (z1, z2) in imagex, Δy) determines a possible unknown key by setting

image

If the size of imagex, Δy) is much smaller ...

Get Computer Security and Cryptography now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.