Search

The key-scheduling algorithm in the AES is the component responsible for selecting from the master key the sequence of round keys to be xor-ed to the partially encrypted state at each iteration. We consider here the group Γ generated by the action of the AES-128 key-scheduling operation, and we prove that the smallest group containing Γ and all the translations of the message space is primitive. As a consequence, we obtain that no linear partition of the message space can be invariant under its action. [ABSTRACT FROM AUTHOR]

A partition into distinct parts is refinable if one of its parts a can be replaced by two different integers which do not belong to the partition and whose sum is a, and it is unrefinable otherwise. Clearly, the condition of being unrefinable imposes on the partition a non-trivial limitation on the size of the largest part and on the possible distributions of the parts. We prove a O (n 1 / 2) -upper bound for the largest part in an unrefinable partition of n, and we call maximal those which reach the bound. We show a complete classification of maximal unrefinable partitions for triangular numbers, proving that if n is even there exists only one maximal unrefinable partition of n (n + 1) / 2 , and that if n is odd the number of such partitions equals the number of partitions of ⌈ n / 2 ⌉ into distinct parts. In the second case, an explicit bijection is provided. [ABSTRACT FROM AUTHOR]

We provide two sufficient conditions to guarantee that the round functions of a translation-based cipher generate a primitive group. Furthermore, under the same hypotheses, and assuming that a round of the cipher is strongly proper and consists of -bit S-Boxes, with or , we prove that such a group is the alternating group. As an immediate consequence, we deduce that the round functions of some lightweight translation-based ciphers, such as the PRESENT cipher, generate the alternating group. [ABSTRACT FROM AUTHOR]

A block cipher can be easily broken if its encryption functions can be seen as linear maps on a small vector space. Even more so, if its round functions can be seen as linear maps on a small vector space. We show that this cannot happen for the AES. More precisely, we prove that if the AES round transformations can be embedded into a linear cipher acting on a vector space, then this space is huge-dimensional and so this embedding is infeasible in practice. We present two elementary proofs. [ABSTRACT FROM AUTHOR]

In this paper we propose a tokenization algorithm of Reversible Hybrid type, as defined in PCI DSS guidelines for designing a tokenization solution, based on a block cipher with a secret key and (possibly public) additional input. We provide some formal proofs of security for it, which imply our algorithm satisfies the most significant security requirements described in PCI DSS tokenization guidelines. Finally, we give an instantiation with concrete cryptographic primitives and fixed length of the PAN, and we analyze its efficiency and security. [ABSTRACT FROM AUTHOR]

We study the relation among some security parameters for vectorial Boolean functions which prevent attacks on the related block cipher. We focus our study on a recently-introduced security criterion, called weak differential uniformity, which prevents the existence of an undetectable trapdoor based on imprimitive group action. We present some properties of functions with low weak differential uniformity, especially for the case of power functions and 4-bit S-Boxes. [ABSTRACT FROM AUTHOR]

The correctness in decrypting a ciphertext after some operations in the DGVH scheme depends heavily on the dimension of the secret key. In this paper we compute two bounds on the size of the secret key for the DGHV scheme to decrypt correctly a ciphertext after a fixed number of additions and a fixed number of multiplication. Moreover we improve the original bound on the dimension of the secret key for a general circuit. [ABSTRACT FROM AUTHOR]

In this paper, we give a characterization of digraphs Q, | Q|≤4 such that the associated Hecke-Kiselman monoids H are finite. In general, a necessary condition for H to be a finite monoid is that Q is acyclic and its Coxeter components are Dynkin diagrams. We show, by constructing examples, that such conditions are not sufficient. [ABSTRACT FROM AUTHOR]