International Association for Cryptologic Research

International Association
for Cryptologic Research

CryptoDB

Characteristics of Key-Dependent S-Boxes: the Case of Twofish

Authors:
Marco Macchetti
Download:
URL: http://eprint.iacr.org/2005/115
Search ePrint
Search Google
Abstract: In this paper we analyze and discuss the cryptographic robustness of key-dependent substitution boxes (KDSBs); these can be found in some symmetric-key algorithms such as Khufu, Blowfish, and the AES finalist Twofish. We analyze KDSBs in the framework of composite permutations, completing the theory developed by O'Connor. Under the basic assumption that KDSBs are built choosing permutations randomly from the symmetric group $S_{2^m}$ by means of the key, the expressions of their linear and differential characteristics are derived. These results are used as a statistical tool to show that Twofish KDSBs, although very efficient, can be easily distinguished from truly randomly built KDSBs. We also analyze the motivations that lead to this previously unknown property; it can be concluded that the efficiency of the construction and the small computational complexity of Twofish KDSBs, although very desirable, cannot be easily obtained together with the highest level of security.
BibTeX
@misc{eprint-2005-12451,
  title={Characteristics of Key-Dependent S-Boxes: the Case of Twofish},
  booktitle={IACR Eprint archive},
  keywords={secret-key cryptography / Block ciphers, key-dependent s-boxes, linear cryptanalysis, Twofish.},
  url={http://eprint.iacr.org/2005/115},
  note={not published elsewhere macchett@elet.polimi.it 12881 received 8 Apr 2005},
  author={Marco Macchetti},
  year=2005
}