Pub Date : 2025-07-11DOI: 10.1134/S1990478924040094
N. A. Kolomeec
Additive differentials of the function ( (x oplus y) lll r ) whose probability is ( 0 ) are considered, where ( x, y in mathbb {Z}_2^{n} ) and ( 1 leq r < n ). They are called impossible differentials and are interesting in the context of differential cryptanalysis of ciphers whose schemes consist of additions modulo ( 2^n ), bitwise XORs ( ( oplus )), and bit rotations ( ( lll r )). The number of all such differentials is calculated for all possible ( r ) and ( n ). It is also shown that this number is greater than ( frac {38}{245} 8^n ). Moreover, the estimate is asymptotically tight for ( r, n-r to infty ). For any fixed ( n ) the number of all impossible differentials decreases as ( r ) goes from ( 1 ) to ( lceil n/2 rceil ) (to ( lceil n/2 rceil + 1 ) in the case of ( n in {4, 5, 6, 8, 10, 12} )) and then increases monotonically as ( r ) goes to ( n-1 ). A simplified description of all impossible differentials is obtained up to known symmetries.
考虑概率为( 0 )的函数( (x oplus y) lll r )的加性微分,其中( x, y in mathbb {Z}_2^{n} )和( 1 leq r < n )。它们被称为不可能微分,在密码的微分密码分析的上下文中很有趣,这些密码的方案包括加法模( 2^n )、逐位xor (( oplus ))和位旋转(( lll r ))。对所有可能的( r )和( n )计算所有这些差异的数量。结果还表明,这个数字大于( frac {38}{245} 8^n )。此外,对( r, n-r to infty )的估计是渐近严密的。对于任何固定的( n ),当( r )从( 1 )到( lceil n/2 rceil )时,所有不可能的差分的数量减少(( n in {4, 5, 6, 8, 10, 12} )的情况是( lceil n/2 rceil + 1 )),然后随着( r )到( n-1 )单调增加。对于已知的对称性,得到了所有不可能微分的简化描述。
{"title":"The Number of Impossible Additive Differentials\u0000for the Composition of XOR and Bit Rotation","authors":"N. A. Kolomeec","doi":"10.1134/S1990478924040094","DOIUrl":"10.1134/S1990478924040094","url":null,"abstract":"<p> Additive differentials of the function\u0000<span>( (x oplus y) lll r )</span> whose probability is\u0000<span>( 0 )</span> are considered, where\u0000<span>( x, y in mathbb {Z}_2^{n} )</span> and\u0000<span>( 1 leq r < n )</span>. They are called impossible differentials and are interesting in the context of\u0000differential cryptanalysis of ciphers whose schemes consist of additions modulo\u0000<span>( 2^n )</span>, bitwise XORs (\u0000<span>( oplus )</span>), and bit rotations (\u0000<span>( lll r )</span>). The number of all such differentials is calculated for all possible\u0000<span>( r )</span> and\u0000<span>( n )</span>. It is also shown that this number is greater than\u0000<span>( frac {38}{245} 8^n )</span>. Moreover, the estimate is asymptotically tight for\u0000<span>( r, n-r to infty )</span>. For any fixed\u0000<span>( n )</span> the number of all impossible differentials decreases as\u0000<span>( r )</span> goes from\u0000<span>( 1 )</span> to\u0000<span>( lceil n/2 rceil )</span> (to\u0000<span>( lceil n/2 rceil + 1 )</span> in the case of\u0000<span>( n in {4, 5, 6, 8, 10, 12} )</span>) and then increases monotonically as\u0000<span>( r )</span> goes to\u0000<span>( n-1 )</span>. A simplified description of all impossible differentials is obtained up to\u0000known symmetries.\u0000</p>","PeriodicalId":607,"journal":{"name":"Journal of Applied and Industrial Mathematics","volume":"18 4","pages":"722 - 743"},"PeriodicalIF":0.58,"publicationDate":"2025-07-11","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"145143120","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}