Construction of Recursive MDS Diffusion Layers from Gabidulin Codes - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2013

Construction of Recursive MDS Diffusion Layers from Gabidulin Codes

Thierry Pierre Berger
DMI

Résumé

Many recent block ciphers use Maximum Distance Separable (MDS) matrices in their diffusion layers. The main objective of this operation is to spread as much as possible the differences between the outputs of nonlinear Sboxes. So they generally act as nibble or bytes level. The MDS matrices are associated to MDS codes of ratio 1/2. The most famous example is those of the MixColumns operation in the AES block cipher. In this example, the MDS matrix was chosen carefully in order to obtain compact and efficient implementations in software and hardware. However, this MDS matrix is dedicated to word of 8 bits, and are not always adapted to lightweight applications. Recently, several studies have been devoted to the construction of recursive diffusion layers. Such a method allows to apply a MDS matrix by the main of an iterative process which looks like to a Feistel network with linear functions instead of nonlinear. In this paper, we present a generic construction of MDS recursive diffusion layers. This construction uses Gabidulin codes which have the property to be not only MDS but also MRD (Maximum Rank Distance). This fact gives an additional property to diffusions layers which seems interesting for cryptographic applications.

Dates et versions

hal-00913852 , version 1 (04-12-2013)

Identifiants

Citer

Thierry Pierre Berger. Construction of Recursive MDS Diffusion Layers from Gabidulin Codes. 14th International Conference on Cryptology in India,, Dec 2013, Bombay, India. pp.274-285, ⟨10.1007/978-3-319-03515-4_18⟩. ⟨hal-00913852⟩

Collections

UNILIM CNRS XLIM
142 Consultations
0 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More