Paper 2020/005 Original: eprint.iacr.org/2020/005 ↗
Lai-Massey Scheme Revisited
Abstract
Lai-Massey scheme is a well-known block cipher structure which has been used in the design of the ciphers PES, IDEA, WIDEA, FOX and MESH. Recently, the lightweight block cipher FLY applied this structure in the construction of a lightweight $8 \times 8$ S-box from $4 \times 4$ ones. In the current paper, firstly we investigate the linear, differential and algebraic properties of the general form of S-boxes used in FLY, mathematically. Then, based on this study, a new cipher structure is proposed which we call generalized Lai-Massey scheme or GLM. We give upper bounds for the maximum average differential probability (MADP) and maximum average linear hull (MALH) of GLM and after examination of impossible differentials and zero-correlations of one round of this structure, we show that two rounds of GLM do not have any structural impossible differentials or zero-correlations. As a measure of structural security, we prove the pseudo-randomness of GLM by the H-coefficient method.
Metadata
- Available format(s)
PDF- Category
- Secret-key cryptography
- Publication info
- Preprint.
- History
- 2020-01-03: last updated
- 2020-01-03: published
- Short URL
- https://ia.cr/2020/005
- License
- https://creativecommons.org/licenses/by/4.0/
BibTeX
@misc{cryptoeprint:2020/005,
author = {M. R. Mirzaee Shamsabad and S. M. Dehnavi},
title = {Lai-Massey Scheme Revisited},
howpublished = {Cryptology {ePrint} Archive, Paper 2020/005},
year = {2020},
url = {https://eprint.iacr.org/2020/005}
}