减轮LEA密码算法的积分攻击

LEA密码算法是一类ARX型轻量级分组密码，广泛适用于资源严格受限的环境.本文使用中间相错技术找到LEA算法的86条8轮和6条9轮零相关区分器，进一步利用零相关区分器和积分区分器的关系，构造出5条8轮和1条9轮积分区分器.在8轮积分区分器的基础上，利用密钥扩展算法的性质和部分和技术，首次实现了对LEA-128的10轮积分攻击，攻击的计算复杂度为2¹²⁰次10轮LEA-128加密.进一步，实现了对LEA-192的11轮积分攻击以及对LEA-256的11轮积分攻击，计算复杂度分别为2^185.02次11轮LEA-192加密和2²⁴⁸次11轮LEA-256加密.

Integral Attack on Reduced-Round LEA Cipher

LEA cipher,a family of ARX lightweight block cipher,is widely used in resource-constrained environments.In this paper,we use the miss-in-the-middle technique to find 86 8-round zero-correlation distinguishers and 6 9-round zero-correlation distinguishers of LEA,and make use of the relationship between the zero-correlation distinguisher and the integral distinguisher to construct 5 8-round distinguishers and 1 9-round integral distinguishers.Based on 8-round integral distinguisher,integral attack on 10-round LEA-128 is implemented firstly by using the property of the key schedule and partial-sum technology,and the attack performs 2¹²⁰ 10-round LEA-128 encryptions.Besides,the integral attack against 11-round LEA-192 with computational complexity of 2^185.02 11-round LEA-192 encryptions and the integral attack against 11-round LEA-256 with computational complexity of 2²⁴⁸ 11-round LEA-256 encryptions are implemented.