學(xué)術(shù)評(píng)論

特邀評(píng)論人: 胡磊, 《密碼學(xué)報(bào)》副主編，中國(guó)科學(xué)院信息工程研究所信息安全國(guó)家重點(diǎn)實(shí)驗(yàn)室研究員

Invited Reviewer: HU Lei, Associate Editor-in-Chief of Journal of Cryptologic Research, Professor of State Key Laboratory of Information Security, Institute of Information Engineering, Chinese Academy of Sciences

評(píng)《分組密碼結(jié)構(gòu)抗Simon 量子算法攻擊研究》隨著量子計(jì)算機(jī)研制的快速發(fā)展，量子算法對(duì)各類密碼體制的安全性影響日益成為密碼學(xué)迫切需要解決的課題。在這方面，量子算法對(duì)目前廣泛應(yīng)用的基于數(shù)論的公鑰密碼的影響是大家較為清楚的，其影響是對(duì)這類公鑰密碼體制的顛覆性威脅，這迫使密碼學(xué)家加速研究抵抗量子計(jì)算機(jī)攻擊的所謂后量子公鑰密碼算法，目前國(guó)內(nèi)外都已經(jīng)開展了這方面的密碼算法征集。而與公鑰密碼相對(duì)，關(guān)于量子算法對(duì)對(duì)稱密碼的安全性影響，雖然近幾年國(guó)際學(xué)術(shù)界發(fā)表了一些研究文獻(xiàn)，但總體上仍處于初始階段，其中我國(guó)的相關(guān)研究就更少了?！睹艽a學(xué)報(bào)》2019 年刊登的這篇論文研究了幾種主要的分組密碼結(jié)構(gòu)抵抗Simon 量子算法攻擊的安全性，得到了若干明晰的分析結(jié)論，包括：（1）在CPA 模式下，可使用Simon量子算法將三輪MISTY-L/MISTY-R 結(jié)構(gòu)與隨機(jī)置換區(qū)分；（2）在量子CPA 攻擊下，三輪Lai-Massey 結(jié)構(gòu)能夠抵抗已知基于Simon 量子算法的攻擊，因而僅以抵抗Simon 量子算法攻擊而論，Lai-Massey 結(jié)構(gòu)優(yōu)于Feistel 結(jié)構(gòu)；（3）弱化條件下Simon 算法的一個(gè)性質(zhì)。論文對(duì)分組密碼設(shè)計(jì)和安全性分析具有很好的指導(dǎo)意義和參考價(jià)值。

Review on “Study on Block Cipher Structures Against Simon’s Quantum Algorithm”

With the rapid development of quantum computer, the influence of quantum algorithms on security of all kinds of cryptographic schemes has become an urgent topic to be solved. In this regard, the influence on the widely used number-theory-based public key cryptography is clear, its impact is a subversive threat to this kind of public key cryptosystems, which forces cryptographers to accelerate the study of the so-called post-quantum public key cryptographic algorithms to resist against quantum computer attacks, and collection events of cryptographic algorithms in this kind have been carried out at both home and abroad. As opposed to public key cryptography, the influence of quantum algorithms to the security of symmetric cryptography, although some research literatures have been published in recent years, it is still in an initial research stage, and among which there are fewer related researches from China. This paper, published in the Journal of Cryptographic Research in 2019, studied the security of several major block cipher structures against Simon quantum algorithm attacks, and drawn several clear analytical conclusions, including: (1) Under the CPA model, Simon quantum algorithms can be used to distinguish three-round MISTY-L/MISTY-L structures and random permutations; (2) Under the quantum CPA attack, the three-round Lai-Massey structure can resist the attack of known Simon-based quantum algorithms, so in the sense of only considering Simon quantum attack resistance, Lai-Massey structure is superior to the Feistel structure; (3) A propostion of Simon algorithm under weakening conditions. The paper has good guiding significance and reference value for the design and security analysis of block ciphers.

所評(píng)文章引用格式: 羅宜元, 閆海倫, 王磊, 胡紅鋼, 來學(xué)嘉. 分組密碼結(jié)構(gòu)抗Simon量子算法攻擊研究[J]. 密碼學(xué)報(bào), 2019, 6(5): 561-573.[DOI: 10.13868/j.cnki.jcr.000322]

所評(píng)文章英文引用格式: LUO Y Y, YAN H L, WANG L, HU H G, LAI X J. Study on block cipher structures against

Simon’s quantum algorithm[J]. Journal of Cryptologic Research, 2019, 6(5): 561-573.[DOI: 10.13868/j.cnki.jcr.000322]