On the Influence of the Algebraic Degree of $F^{-1}$ on the Algebraic Degree of G ∘ F - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Journal Articles IEEE Transactions on Information Theory Year : 2013

On the Influence of the Algebraic Degree of $F^{-1}$ on the Algebraic Degree of G ∘ F

Abstract

We present a study on the algebraic degree of iterated permutations seen as multivariate polynomials. The main result shows that this degree depends on the algebraic degree of the inverse of the permutation which is iterated. This result is also extended to non-injective balanced vectorial functions where the relevant quantity is the minimal degree of the inverse of a permutation expanding the function. This property has consequences in symmetric cryptography since several attacks or distinguishers exploit a low algebraic degree, like higher-order di erential attacks, cube attacks and cube testers, or algebraic attacks. Here, we present some applications of this improved bound to a higherdegree variant of the block cipher KN, to the block cipher Rijndael-256 and to the inner permutations of the hash functions ECHO and JH.
Fichier principal
Vignette du fichier
ieee_boura_canteaut.pdf (420.67 Ko) Télécharger le fichier
Origin Files produced by the author(s)
Loading...

Dates and versions

hal-00738398 , version 1 (04-10-2012)

Identifiers

Cite

Christina Boura, Anne Canteaut. On the Influence of the Algebraic Degree of $F^{-1}$ on the Algebraic Degree of G ∘ F. IEEE Transactions on Information Theory, 2013, 59 (1), pp.691-702. ⟨10.1109/TIT.2012.2214203⟩. ⟨hal-00738398⟩

Collections

INRIA INRIA2
165 View
364 Download

Altmetric

Share

Gmail Mastodon Facebook X LinkedIn More