Shulou(Shulou.com)11/24 Report--

CTOnews.com, November 20 (Xinhua) recently, the trusted intelligent system research team of the Institute of Software Research of the Chinese Academy of Sciences has made some progress in differential cryptanalysis of block encryption algorithms, according to official account of the Institute of Software of the Chinese Academy of Sciences.

It is reported that the team designed a domain programming language EasyBC for block encryption algorithm, proposed a general and extensible differential cryptanalysis method, and developed a fully automatic analysis tool platform EasyBC.

▲ EasyBC platform flow chart, Tu Yuan Software Research Institute of the Chinese Academy of Sciences official account CTOnews.com learned from the Software Research Institute of the Chinese Academy of Sciences that the research result has been accepted by the top international conference of programming languages POPL 2024 under the title EasyBC: a Cryptography-Specific Language for Security Analysis of Block Ciphers against Differential Cryptanalysis. The correspondent is Song Fu, a researcher in the State key Laboratory of computer Science of the Software Institute.

It is reported that the block encryption algorithm (block cipher) divides the plaintext into several equal-length modules (block), encrypts or decrypts each group with a symmetric key, and is widely used in e-mail encryption, bank transaction transfer and other fields.

As an extremely important encryption protocol, the mainstream block encryption algorithms are SM1, SM4 and SM7 issued by China's State Cryptography Administration, and the standard algorithms AES and 3DES approved by the US government.

Differential cryptanalysis plays a core role in evaluating the security of block encryption algorithms and is an indispensable means of security analysis for the standardization of block encryption algorithms.

At present, the existing differential cryptanalysis methods have some deficiencies in versatility and automation, and the complexity of the modeling process leads to users need to be familiar with a large number of modeling methods and the application of underlying analysis tools.

In order to solve the above shortcomings, the research team designed a cryptographic high-level programming language EasyBC for block encryption algorithms, which provides a complete formal definition of syntax, type and semantics, which lays a good foundation for automatic security analysis of block encryption algorithms. Three differential cryptanalysis methods with different analysis accuracy and performance are proposed, which not only unifies and optimizes the existing modeling methods of all kinds of encryption operations, but also puts forward a variety of new modeling methods.

There are 23 encryption primitives implemented in ▲ EasyBC language, and the official account research team of the Institute of Software Research of the Chinese Academy of Sciences has implemented 23 encryption primitives, including the underlying replacement algorithm of the National Institute of Standards and Technology (National Institute of Standards and Technology,NIST) certified encryption scheme and a variety of commonly used block encryption algorithms. And the security of the block cipher primitive is analyzed, and then the expression ability of EasyBC language and the effectiveness of automatic security analysis of EasyBC tool platform are verified.

According to the results of differential cryptographic security analysis of encryption primitives implemented by ▲ Word-wise, the Institute of Software of the Chinese Academy of Sciences official account said that this study is of great significance to the study of differential cryptanalysis of block encryption algorithms. It provides a good research foundation and platform support for subsequent cryptography researchers to automatically analyze the security of block encryption algorithms and evaluate the performance of various operation modeling methods.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.