Chng 3:Chun m d liu

3.6. Thm m vi sai (DC)

Ni dung
3.6.1. Thm m vi sai (DC)
3.6.2. Tn cng DES 3 vng
3.6.3. Tn cng DES 6 vng

3.6.1. Thm m vi sai (DC)

Phng php DC do Biham v Shamir a ra l mt phng php tn cng DES rt ni ting. y l mt php
tn cng vi bn r chn lc. Mc d phng php ny
khng cho mt phng php thc t ph DES 16 vng
thng dng, nhng n c th thc hin thnh cng trong
vic ph DES c s vng m ho t hn. Chng hn DES 8
vng c th ph c trong vng vi pht trn mt my tnh
c nhn nh.
tng c bn trong k thut DC, b qua php ho v
ban u IP v php hon v ngc ca n ( khng nh hng
ti vic phn tch m). Nh ni trn, ta ch xt hn ch
DES n vng vi n 16. Ta coi L0R0 l bn r v LnRn l bn
m trong DES n vng

Phng php DC xoay quanh vic so snh kt

qu php XOR ca hai bn r vi kt qu ca
php XOR ca hai bn m tng ng. i th ta
s xt hai bn r L0R0 vL0*R0* vi gi tr ca
php XOR :
L0'R0' = L0R0 L0*R0*.
Trong phn ny ta s s dng k hiu ( ' )
ch php hoc - loi tr (XOR) ca hai xu
bt.

nh ngha 3.1
Gi s Sj l mt hp S (1 j 8 ). Xt mt cp
sp xp ca cc xu bt di 6 . K hiu l (Bj, Bj*).
Ta ni rng XOR vo (ca Sj ) l Bj Bj* v
XOR ra ( ca Sj ) l Sj(Bj) Sj(Bj*).

Ch rng XOR vo l mt xu bt c di 6 v XOR ra l mt xu bt c di 4.

nh ngha 3.2
Vi bt k Bj' (Z2)6, ta nh ngha tp (Bj')
gm cc cp c sp xp (Bj,Bj*) c XOR vo l Bj'.
(Bj') = {(Bj,Bj Bj' ) : Bj (Z2)6}
Vi mi cp trong (Bj') ta c th tnh XOR ra ca Sj v lp bng phn b kt
qu. C 64 XOR ra phn b trong 24 = 16 gi tr c th.
=> Tnh khng u ca cc phn b ny l c s cho php tn cng.

V d 3.1.
- Gi s xt hp S u tin S1 v XOR vo 110100
Khi :
(110100) = {(000000,110100), (000001,110100), . . .
,(111111,110100)}
- Vi mi cp c sp trong tp(110100) ta tnh XOR ra ca S1
S1(000000) = E16 = 1110 v S1(110100) = 916 = 1001, bi vy XOR i vi cp
(000000,110100) l 011
Nu lm cng vic ny cho tt c 64 cp trong (110100) th ta s thu c phn
b sau ca cc XOR ra:

=> Trong v d 3.1 ch c 8 trong 16 XOR

ra c th xut hin trn thc t. V d
ny c phn b rt khng u. Ni
chung nu ta c nh mt hp S l Sj v
mt XOR vo Bj' th trung bnh c
khong 75-80% cc XOR ra l c th xut
hin.

nh ngha 3.3
Vi 1 j 8 v vi cc xu bt Bj' c di 6
cn Cj' c di 4,
Ta nh ngha:
INj(Bj',Cj') = { Bj (Z2)6 : Sj(Bj) Sj(Bj Bj') = Cj'}
v
Nj(Bj',Cj') = | INj(Bj',Cj' ) |.

Nj(Bj',Cj' ) l s cc cp c XOR vo bng Bj' v c

XOR ra bng Cj' vi hp Sj.

Hnh 3.8. Cc xu vo c th vi XOR vo l 110100.

nh ngha 3.4.
Gi s Ej v Ej* l cc xu bt di 6 v Cj' l
xu bt di 4. Ta nh ngha:
Testj(Ej , Ej*, Cj' ) = {Bj Ej : Bj INj(Ej',Cj')}
trong Ej' = Ej Ej*
Ngha l ly XOR Ej vi mi phn t ca tp
INj(Ej',Cj').
nh l 3.1
Gi s Ej v Ej* l hai xu vo ca hp Sj cn XOR ra
ca Sj l Cj. K hiu Ej' = Ej Ej* . Khi cc bt kho Jj s
nm trong tp testj (Ej, Ej* , Cj').

V d 3.2.
Gi s E1 = 000001, E1* = 110101 v C1' = 1101.
V N1(110100,1101) = 8 nn c ng 8 xu bt trong
tp test1(000001,110101,1101). T hnh 3.8 ta thy
rng:
IN1(110100,1101) = {000110, 010000, 010110, 011100,
100010, 100100 ,101000, 110010}
Bi vy
test1(000001,110101,1101) = {000111, 010001, 010111,
011101, 100011, 100101,101001,110011}.

3.6.2. Tn cng DES 3 vng

Ta ng dng cc tng ca phn trc trong php tn
cng bn r chn lc ln mt h DES 3 vng
* Thut ton tn cng DC ln DES 3 vng.
u vo L0R0,L0*R0* , L3R3 v L3*R3*, trong R0 = R0*
1. Tnh C ' = P-1(R3' L0')
2. Tnh E = E(L3) v E* = E(L3*)
3. For j = 1 to 8 do
Tnh testj(Ej, Ej*, Cj')

V d 3.3.
Gi s ta c 3 cp cc bn r v cc bn m, trong cc bn
r c cc php XOR xc nh, chng c m ho bng cng mt
kho. cho gn ta s biu th di dng m Hexa :

- T cp u tin, tnh cc u vo ca hp S ( cho vng 3 ):

E=000000000111111000001110100000000110100000001100
E*=101111110000001010101100000001010100000001010010
XOR ra ca cc hp S:
C' = 10010110010111010101101101100111

-T cp th hai, ta tnh c cc u vo ca cc hp S l:
E = 101000001011111111110100000101010000001011110110
E* = 000001011110100110100010101111110101011000000100
v XOR ra ca cc hp S l:
C' = 11010101011101011101101100101011

Tip theo, lp bng cc gi tr trong 8 dy b m cho

tng cp. Minh ho th tc ny vi dy b m cho J1
theo cp u tin.
Trong cp ny ta c: E' = 101111 v C' = 1001.
Khi tp:
IN1(101111,1001) = {000000,000111,101000,101111}
-

v E1 = 000000 nn ta c:
J1test1(000000,101111,1001) = {000000,000111,101000,101111}
Bi vy ta s tng cc gi tr 0,7,40 v 47 trong dy b m cho J1.

By gi s trnh by cc bng cui cng. Nu coi

mt xu bt di 6 nh biu din nh phn
ca mt s nguyn nm gia 0 v 63 th 64 gi
tr tng ng l 0,1,. . . ,63. Cc mng b m s
nh sau:

Trong s 8 mng b m ( trong 8 mng trn) c duy

nht mt b m c gi tr 3, cc v tr ca cc b m
ny s c xc nh cc bt kho trong J1,.. ., J8. Cc v
tr ny tng ng l 47,5,19,0,24,7,7,49. i cc s nguyn
sang dng nh phn ta nhn c J1, . . .,J8:
J1 = 101111
J2 = 000101
J3 = 010011
J4 = 000000
J5 = 011000
J6 = 000111
J7 = 000111
J8 = 110001
T ta suy ra c kho y l: 1A624C89520DEC46

3.6.3. Tn cng DES 6 vng

* Thut ton tn cng DES 6 vng
u vo L0R0,L0*R0*,L6R6,v L6*R6*
Trong : L0' = 4008000016 v R0' = 0400000016
1. Tnh C' = P-1(R6' 4008000016)
2. Tnh E = E(L6) v E* = E(L6*)
3. For j {2, 5, 6, 7, 8} do
Tnh testj(Ej, Ej*, Cj')
Thut ton tn cng DES 6 vng tng t nh 3 vng. Tuy nhin
tng ca thut ton ny l phi chn cn thn mt cp bn r vi
php XOR xc nh trc.
Nu bt u bng mt cp ng th cc bt kho ng
cho mi Jj s nm trong tp testj. Nu cp ny sai th gi tr ca
Cj' s khng ng