International Association for Cryptologic Research

International Association
for Cryptologic Research


Paper: Thinking Outside the Superbox

Nicolas Bordes , Université Grenoble Alpes
Joan Daemen , Radboud University
Daniël Kuijsters , Radboud University
Gilles Van Assche , STMicroelectronics
DOI: 10.1007/978-3-030-84252-9_12 (login may be required)
Search ePrint
Search Google
Presentation: Slides
Conference: CRYPTO 2021
Abstract: Designing a block cipher or cryptographic permutation can be approached in many different ways. One such approach, popularized by AES, consists in grouping the bits along the S-box boundaries, e.g., in bytes, and in consistently processing them in these groups. This aligned approach leads to hierarchical structures like superboxes that make it possible to reason about the differential and linear propagation properties using combinatorial arguments. In contrast, an unaligned approach avoids any such grouping in the design of transformations. However, without hierarchical structure, sophisticated computer programs are required to investigate the differential and linear propagation properties of the primitive. In this paper, we formalize this notion of alignment and study four primitives that are exponents of different design strategies. We propose a way to analyze the interactions between the linear and the nonlinear layers w.r.t. the differential and linear propagation, and we use it to systematically compare the four primitives using non-trivial computer experiments. We show that alignment naturally leads to different forms of clustering, e.g., of active bits in boxes, of two-round trails in activity patterns, and of trails in differentials and linear approximations.
Video from CRYPTO 2021
  title={Thinking Outside the Superbox},
  author={Nicolas Bordes and Joan Daemen and Daniël Kuijsters and Gilles Van Assche},