ARX type cryptographic algorithm differential path analysis method and system based on differential propagation

Abstract

The invention relates to the technical field of cryptographic analysis, and discloses an ARX type cryptographic algorithm differential path analysis method and system based on differential propagation, and the method comprises the following steps: constructing a round function of a cryptographic algorithm, configuring differential analysis parameters, and selecting a differential path search strategy. Comprising a multi-differential path automatic mining strategy, a differential aggregation analysis strategy and a search strategy with conditional constraints; converting the round function and the differential analysis parameters into intermediate description data; analyzing the intermediate description data, and extracting structure information of each basic operation unit in the round function; generating a differential analysis constraint; executing a differential path search; submitting the differential analysis constraint to a constraint solver for solving to obtain a differential path result; according to the method, the difference path result is analyzed, and the difference path and the aggregation analysis result are displayed, based on the method, a visual software system is constructed, and convenience and automation of difference analysis are achieved through visual modeling, automatic constraint generation and solver calling.

Description

Technical Field

[0001] This invention relates to the field of cryptanalysis technology, specifically to a differential path analysis method and system for ARX-type cryptographic algorithms based on differential propagation. Background Technology

[0002] With the widespread application of symmetric cryptography algorithms in the field of information security, their security assessment has received continuous attention. Differential analysis, as one of the important methods for evaluating the security of block ciphers, is widely used to analyze the statistical properties of cryptographic algorithms under specific input differential conditions.

[0003] In recent years, ARX-type cryptographic algorithms based on addition, cyclic shift, and XOR operations have been widely used due to their high implementation efficiency and simple structure. However, the complex relationship between nonlinear operations and bit-level propagation in the ARX structure makes the analysis of differential properties highly complex in terms of modeling.

[0004] Existing differential analysis methods for ARX-type cryptographic algorithms largely rely on human experience or semi-automated tools for modeling and path searching, typically requiring analysts to have a strong background in cryptography. Furthermore, current techniques primarily focus on single-path analysis during differential path searching, lacking sufficient support for multi-path joint characteristics, differential aggregation characteristics under specific input-output conditions, and differential path analysis with constraints. This makes it difficult to meet the systemic security assessment requirements during the algorithm design phase.

[0005] Therefore, how to reduce the modeling threshold of differential analysis of ARX-type cryptographic algorithms and improve the automation of the differential path search process while ensuring the accuracy of the analysis has become an urgent problem to be solved in this technical field. Summary of the Invention

[0006] To address the technical problems of existing technologies, such as reliance on human experience, lack of full automation, insufficient support for differential aggregation characteristics of multi-path collaboration, and inadequate support for differential path analysis with constraints, this invention provides a differential path analysis method and system for ARX-type cryptographic algorithms based on differential propagation. The technical solution is as follows:

[0007] Step 1: Construct the round function of the cryptographic algorithm and configure the differential analysis parameters;

[0008] Step 2: Select a differential path search strategy based on the analysis objective. The differential path search strategy includes:

[0009] 1) Automated multi-difference path mining strategy;

[0010] 2) Difference aggregation analysis strategy;

[0011] 3) Differential path search strategy with conditional constraints;

[0012] Step 3: Convert the round function and difference analysis parameters into intermediate description data in a unified format;

[0013] Step 4: Parse the intermediate description data and extract the structural information of each basic operation unit in the round function;

[0014] Step 5: Generate differential analysis constraints based on the differential propagation rules of the basic operation unit;

[0015] Step 6: Execute the selected differential path search strategy;

[0016] Step 7: Submit the differential analysis constraints to the constraint solver for solving to obtain the differential path results;

[0017] Step 8: Analyze the differential path results and display the differential path and aggregation analysis results.

[0018] Furthermore, the intermediate description data in step 2 is represented in a structured data format.

[0019] Furthermore, step 4 specifically includes:

[0020] 1) For the addition unit, generate a constraint expression based on the modulo-addition difference propagation rule;

[0021] 2) For the cyclic shift operation unit, generate differential bit position mapping constraints;

[0022] 3) Generate differential linear constraints for the XOR operation unit.

[0023] Furthermore, the automated multi-difference path mining strategy in step 5 specifically involves automatically searching for and outputting multiple difference paths under the condition of a specified number of analysis rounds.

[0024] Furthermore, the differential aggregation analysis strategy in step 5 is as follows: under the condition of fixed input difference and output difference, find all differential paths within a certain probability, and calculate the probability of the aggregated path based on the set of differential paths.

[0025] Furthermore, the differential path search strategy with conditional constraints in step 5 specifically involves applying preset constraints during the differential path search process.

[0026] Furthermore, the preset constraints include bit-level constraints, round-level constraints, or path weight constraints.

[0027] A differential path analysis system for ARX-type cryptographic algorithms based on differential propagation, used to implement any of the methods described above, includes the following modules:

[0028] Front-end modeling module: Used to visually construct the round function structure of cryptographic algorithms and configure differential analysis parameters;

[0029] Model description module: used to convert the round function structure and difference analysis parameters into intermediate description data in a unified format;

[0030] Backend parsing module: used to receive the intermediate description data, parse the round function structure and each operation unit, and generate differential propagation rules;

[0031] Constraint generation module: used to generate constraint description files based on the difference propagation rules;

[0032] Multi-differential path automated search module: used to automatically search for and output multiple differential paths;

[0033] Aggregation Analysis Module: Used to perform aggregation analysis on differential paths that meet certain conditions, under the premise of fixed input and output differences;

[0034] Condition constraint configuration module: used to apply preset constraints during differential path search;

[0035] Solver Invocation Module: Used to invoke the constraint solver to solve the constraint description file and obtain the differential path results that meet the conditions;

[0036] Results Feedback Module: Used to parse the differential path results and return the differential path information to the front end for display.

[0037] Furthermore, the front-end modeling module supports selecting and combining basic operation units such as addition, circular shift, and XOR by dragging and dropping, and setting the number of rounds, input difference conditions, and analysis parameters.

[0038] Furthermore, the front-end modeling module and the back-end parsing module interact with each other via network communication.

[0039] Beneficial effects:

[0040] This invention reduces the modeling complexity of differential analysis for ARX-type cryptographic algorithms by constructing a round function model through visualization; it decouples front-end modeling from back-end analysis through unified intermediate description data, improving the modularity and scalability of the system; it automates the differential path search process by automatically generating differential analysis constraints and calling the constraint solver; and it supports differential path analysis under different input conditions and constraints, enhancing the systematic nature of the differential analysis results. Attached Figure Description

[0041] Figure 1The flowchart shows the differential path analysis method for ARX-type cryptographic algorithms based on differential propagation.

[0042] Figure 2 A diagram showing the front-end modeling interface of a differential path analysis system for an ARX-type cryptographic algorithm based on differential propagation;

[0043] Figure 3 A diagram showing the automated multi-differential path search interface of a differential path analysis system for ARX-type cryptographic algorithms based on differential propagation;

[0044] Figure 4 This is a diagram of the aggregated analysis interface of a differential path analysis system for an ARX-type cryptographic algorithm based on differential propagation.

[0045] Figure 5 This is a diagram of the condition constraint configuration interface for a differential path analysis system based on the ARX cryptographic algorithm with differential propagation.

[0046] Figure 6 This is a schematic diagram of the overall results of the differential path analysis system for the ARX-type cryptographic algorithm based on differential propagation.

[0047] Figure 7 This is a schematic diagram illustrating the differential round details of a differential path analysis system based on the ARX cryptographic algorithm using differential propagation. Detailed Implementation

[0048] The specific embodiments of the present invention will be described in detail below with reference to the accompanying drawings. It should be understood that the specific embodiments described herein are for illustration and explanation only and are not intended to limit the present invention.

[0049] like Figure 1 As shown, the differential path analysis method for ARX-type cryptographic algorithms based on differential propagation of the present invention includes the following steps:

[0050] Step 1: Construct the round function of the cryptographic algorithm and configure the differential analysis parameters;

[0051] Step 2: Select a differential path search strategy based on the analysis objective. The differential path search strategy includes:

[0052] 1) Automated multi-difference path mining strategy;

[0053] 2) Difference aggregation analysis strategy;

[0054] 3) Differential path search strategy with conditional constraints;

[0055] Step 3: Convert the round function and difference analysis parameters into intermediate description data in a unified format;

[0056] Step 4: Parse the intermediate description data and extract the structural information of each basic operation unit in the round function;

[0057] Step 5: Generate differential analysis constraints based on the differential propagation rules of the basic operation unit;

[0058] Step 6: Execute the selected differential path search strategy;

[0059] Step 7: Submit the differential analysis constraints to the constraint solver for solving to obtain the differential path results;

[0060] Step 8: Analyze the differential path results and display the differential path and aggregation analysis results.

[0061] This invention relates to a differential path analysis system for ARX-type cryptographic algorithms based on differential propagation. The system mainly consists of a front-end module and a back-end module, which interact with each other via network communication. The overall system flow includes round function modeling, model description, constraint generation, path search, and result display.

[0062] Users construct the round function structure of the ARX-type cryptographic algorithm to be analyzed by dragging and dropping through the front-end modeling module. The round function structure consists of multiple basic operation units, including a modular addition unit, a circular shift unit, and an XOR unit.

[0063] like Figure 2 As shown, while constructing the round function structure, users can configure the difference analysis parameters, including the number of rounds, input difference conditions, and difference path search targets. After construction is complete, the current content can be saved for users to modify.

[0064] like Figures 3 to 5 As shown, users select differential path search strategies based on their analysis objectives, including:

[0065] 1) Automated multi-difference path mining strategy: Under the condition of a specified number of analysis rounds, automatically search and output multiple difference paths;

[0066] 2) Differential aggregation analysis strategy: Under the condition of fixed input difference and output difference, the path aggregation analysis module performs aggregation analysis on multiple differential paths that meet the conditions to obtain differential aggregation characteristics;

[0067] 3) Conditional Path Search Strategy: Constraints are applied to the differential path search process through the conditional constraint configuration module. These constraints include bit-level constraints and round-level constraints. For example, the user can limit the input difference to only one active bit in a certain round to achieve conditional path analysis.

[0068] The front-end modeling module converts the round function structure and analysis parameters into structured intermediate description data. This intermediate description data is represented in JSON format and is used to describe the type of operation unit, the connection relationship between operation units, round information, and difference analysis constraint configuration.

[0069] The backend parsing module receives the intermediate description data in JSON format, parses the intermediate description data, and identifies the type of each operation unit and its positional relationship in the round function.

[0070] The backend parsing module generates corresponding difference analysis constraints based on the difference propagation rules of different computational units, where:

[0071] For the addition unit, generate constraints based on the modulo-addition difference propagation relationship;

[0072] For the cyclic shift operation unit, generate differential bit position mapping constraints;

[0073] For the XOR operation unit, generate differential linear constraints.

[0074] The system executes the differential path search strategy selected above.

[0075] The constraint generation module converts the difference analysis constraints into constraint description files that can be recognized by the constraint solver. The constraint description files adopt the CVC format, and the STP constraint solver is called to solve the constraint description files.

[0076] After the solution is completed, the system analyzes the solution results, extracts the differential path information and its statistical characteristics that meet the analysis conditions, and feeds the differential path information back to the front-end interface for display, such as... Figure 6 , Figure 7 As shown, this is provided for users to perform security analysis and assessment.

[0077] The above embodiments are only used to illustrate the technical solutions of the present invention, and are not intended to limit it. Although the present invention has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that modifications can still be made to the technical solutions described in the foregoing embodiments, or equivalent substitutions can be made to some or all of the technical features therein. Such modifications or substitutions do not cause the essence of the corresponding technical solutions to deviate from the scope of the technical solutions of the embodiments of the present invention.

Claims

1. A differential path analysis method for ARX-type cryptographic algorithms based on differential propagation, characterized in that: Includes the following steps: Step 1: Construct the round function of the cryptographic algorithm and configure the differential analysis parameters; Step 2: Select a differential path search strategy based on the analysis objective. The differential path search strategy includes: 1) Automated multi-difference path mining strategy; 2) Difference aggregation analysis strategy; 3) Differential path search strategy with conditional constraints; Step 3: Convert the round function and difference analysis parameters into intermediate description data in a unified format; Step 4: Parse the intermediate description data and extract the structural information of each basic operation unit in the round function; Step 5: Generate differential analysis constraints based on the differential propagation rules of the basic operation unit; Step 6: Execute the selected differential path search strategy; Step 7: Submit the differential analysis constraints to the constraint solver for solving to obtain the differential path results; Step 8: Analyze the differential path results and display the differential path and aggregation analysis results.

2. The differential path analysis method for ARX-type cryptographic algorithms based on differential propagation as described in claim 1, characterized in that: The intermediate description data in step 2 is represented in a structured data format.

3. The differential path analysis method for ARX-type cryptographic algorithms based on differential propagation as described in claim 1, characterized in that: Step 4 specifically involves: 1) For the addition unit, generate a constraint expression based on the modulo-addition difference propagation rule; 2) For the cyclic shift operation unit, generate differential bit position mapping constraints; 3) Generate differential linear constraints for the XOR operation unit.

4. The differential path analysis method for ARX-type cryptographic algorithms based on differential propagation as described in claim 1, characterized in that: The automated multi-difference path mining strategy in step 5 is as follows: under the condition of a specified number of analysis rounds, automatically search for and output multiple difference paths.

5. The differential path analysis method for ARX-type cryptographic algorithms based on differential propagation as described in claim 1, characterized in that: The differential aggregation analysis strategy in step 5 is as follows: under the condition of fixed input difference and output difference, find all differential paths within a certain probability, and calculate the probability of the aggregation path based on the set of differential paths.

6. The differential path analysis method for ARX-type cryptographic algorithms based on differential propagation as described in claim 1, characterized in that: The differential path search strategy with conditional constraints in step 5 is as follows: during the differential path search process, preset constraints are applied.

7. The differential path analysis method for ARX-type cryptographic algorithms based on differential propagation as described in claim 6, characterized in that: The preset constraints include bit-level constraints, round-level constraints, or path weight constraints.

8. A differential path analysis system for an ARX-type cryptographic algorithm based on differential propagation, characterized in that: To implement the method as described in any one of claims 1 to 7, the method includes the following modules: Front-end modeling module: Used to visually construct the round function structure of cryptographic algorithms and configure differential analysis parameters; Model description module: used to convert the round function structure and difference analysis parameters into intermediate description data in a unified format; Backend parsing module: used to receive the intermediate description data, parse the round function structure and each operation unit, and generate differential propagation rules; Constraint generation module: used to generate constraint description files based on the difference propagation rules; Multi-differential path automated search module: used to automatically search for and output multiple differential paths; Aggregation Analysis Module: Used to perform aggregation analysis on differential paths that meet certain conditions, under the premise of fixed input and output differences; Condition constraint configuration module: used to apply preset constraints during differential path search; Solver Invocation Module: Used to invoke the constraint solver to solve the constraint description file and obtain the differential path results that meet the conditions; Results Feedback Module: Used to parse the differential path results and return the differential path information to the front end for display.

9. The differential path analysis system for ARX-type cryptographic algorithms based on differential propagation as described in claim 8, characterized in that: The front-end modeling module supports dragging and dropping to select and combine basic operation units such as addition, circular shift, and XOR, and sets the number of rounds, input difference conditions, and analysis parameters.

10. The differential path analysis system for ARX-type cryptographic algorithms based on differential propagation as described in claim 8, characterized in that: The front-end modeling module and the back-end parsing module interact with each other via network communication.

Images