Classification of SPN Structures From the Viewpoint of Structural Cryptanalysis

Abstract

In this paper, we provide two types of pattern matrices for the diffusion layer P, both can be used as classification criteria for the substitution-permutation network (SPN) structures: if the pattern matrices of distinct SPN structures are equal, then these structures may have the same impossible differential (ID)/zero correlation linear hull (ZC) and the same differential/linear active S-boxes. We introduce some interesting properties of the pattern matrices. Applying our results, we arrive at several interesting facts. First, all the SPN structures with MDS-type diffusion layers fall into the same class and have the same ID/ZC/minimum number of active S-boxes. Second, we provide several interesting properties of pattern matrices and build the links between the P-layer and that after several popular operations. Finally, we investigate the properties of pattern matrices for bit shuffles, the pattern matrices keep the same if and only if the n-partition characteristics of them are equal. Our results are helpful in the designing of block ciphers.

Keywords

• Diffusion layer
• SPN cipher
• LDE%22%2C%22default_operator%22%3A%22AND%22%7D%7D%7D"> <monospace xmlns:ali="http://www.niso.org/schemas/ali/1.0/" xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">LDE</monospace>
• pattern matrices