TY - JOUR
T1 - Higher order differentiation over finite fields with applications to generalising the cube attack
AU - Sălăgean, Ana
AU - Winter, R.
AU - Mandache-Sălăgean, Matei
AU - Phan, Raphael C.W.
N1 - Publisher Copyright:
© 2016, The Author(s).
Copyright:
Copyright 2017 Elsevier B.V., All rights reserved.
PY - 2017/9
Y1 - 2017/9
N2 - Higher order differentiation was introduced in a cryptographic context by Lai. Several attacks can be viewed in the context of higher order differentiations, amongst them the cube attack of Dinur and Shamir and the AIDA attack of Vielhaber. All of the above have been developed for the binary case. We examine differentiation in larger fields, starting with the field GF (p) of integers modulo a prime p, and apply these techniques to generalising the cube attack to GF (p). The crucial difference is that now the degree in each variable can be higher than one, and our proposed attack will differentiate several times with respect to each variable (unlike the classical cube attack and its larger field version described by Dinur and Shamir, both of which differentiate at most once with respect to each variable). Connections to the Moebius/Reed Muller Transform over GF (p) are also examined. Finally we describe differentiation over finite fields GF (ps) with ps elements and show that it can be reduced to differentiation over GF (p) , so a cube attack over GF (ps) would be equivalent to cube attacks over GF (p).
AB - Higher order differentiation was introduced in a cryptographic context by Lai. Several attacks can be viewed in the context of higher order differentiations, amongst them the cube attack of Dinur and Shamir and the AIDA attack of Vielhaber. All of the above have been developed for the binary case. We examine differentiation in larger fields, starting with the field GF (p) of integers modulo a prime p, and apply these techniques to generalising the cube attack to GF (p). The crucial difference is that now the degree in each variable can be higher than one, and our proposed attack will differentiate several times with respect to each variable (unlike the classical cube attack and its larger field version described by Dinur and Shamir, both of which differentiate at most once with respect to each variable). Connections to the Moebius/Reed Muller Transform over GF (p) are also examined. Finally we describe differentiation over finite fields GF (ps) with ps elements and show that it can be reduced to differentiation over GF (p) , so a cube attack over GF (ps) would be equivalent to cube attacks over GF (p).
KW - Cube attack
KW - Higher order derivative
KW - Higher order differentiation
UR - http://www.scopus.com/inward/record.url?scp=84988566228&partnerID=8YFLogxK
U2 - 10.1007/s10623-016-0277-5
DO - 10.1007/s10623-016-0277-5
M3 - Article
AN - SCOPUS:84988566228
SN - 0925-1022
VL - 84
SP - 425
EP - 449
JO - Designs, Codes, and Cryptography
JF - Designs, Codes, and Cryptography
IS - 3
ER -