SAILFISH-I and ASD are lightweight block cipher algorithms proposed in recent years based on the Feistel and SPN structures. According to the structure characteristics of the two algorithms,bit-based Mixed Integer Linear Programming (MILP) division property models are constructed and the Gu-robi is adopted to solve the MILP models. In this paper,8,9,and 10-round integral distinguishers for the SAILFISH-I algorithm and 7,8,and 9-round integral distinguishers for the ASD algorithm are ob-tained respectively for the first time. On the basis of the 9-round integral distinguisher,12-round inte-gral attack on the SAILFISH-I algorithm is performed with 3 rounds backward extension. Attack data complexity is～259. 58 times chosen plaintext size,and time complexity is～2109. 99 times 12-round en-cryption,and storage complexity is～257 memory cell. On the basis of the 8-round integral distinguis-her,10-round integral attack on the ASD algorithm is performed with 2 rounds backward extension. At-tack data complexity is～257. 39 times chosen plaintext size,and time complexity is～270. 07 times 10-round encryption,and storage complexity is～220 memory cell.
关键词
SAILFISH-I/ASD/可分性质/MILP/积分攻击
Key words
SAILFISH-I/ASD/division property/MILP (Mixed Integer Linear Programming)/Integral Attack
维普
万方数据