### Capacity and Data Complexity in Multidimensional Linear Attack

Jialin Huang, Serge Vaudenay, Xuejia Lai, and Kaisa Nyberg

##### Abstract

Multidimensional linear attacks are one of the most powerful variants of linear cryptanalytic techniques now. However, there is no knowledge on the key-dependent capacity and data complexity so far. Their values were assumed to be close to the average value for a vast majority of keys. This assumption is not accurate. In this paper, under a reasonable condition, we explicitly formulate the capacity as a Gamma distribution and the data complexity as an Inverse Gamma distribution, in terms of the average linear potential and the dimension. The capacity distribution is experimentally verified on the 5-round PRESENT. Regarding complexity, we solve the problem of estimating the average data complexity, which was difficult to estimate because of the existence of zero correlations. We solve the problem of using the median complexity in multidimensional linear attacks, which is an open problem since proposed in Eurocrypt 2011. We also evaluate the difference among the median complexity, the average complexity and a lower bound of the average complexity -- the reciprocal of average capacity. In addition, we estimate more accurately the key equivalent hypothesis, and reveal the fact that the average complexity only provides an accurate estimate for less than half of the keys no matter how many linear approximations are involved. Finally, we revisit the so far best attack on PRESENT based on our theoretical result.

Available format(s)
Category
Secret-key cryptography
Publication info
A minor revision of an IACR publication in CRYPTO 2015
Keywords
multidimensional linear attackcapacitydata complexitylinear hull effectlinear potential
Contact author(s)
jlhuang cn @ gmail com
History
Short URL
https://ia.cr/2016/051 CC BY

BibTeX

@misc{cryptoeprint:2016/051,
author = {Jialin Huang and Serge Vaudenay and Xuejia Lai and Kaisa Nyberg},
title = {Capacity and Data Complexity in Multidimensional Linear Attack},
howpublished = {Cryptology ePrint Archive, Paper 2016/051},
year = {2016},
note = {\url{https://eprint.iacr.org/2016/051}},
url = {https://eprint.iacr.org/2016/051}
} Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.
{"ft_lang_label":"__label__en","ft_lang_prob":0.8714494,"math_prob":0.8127972,"size":2304,"snap":"2023-40-2023-50","text_gpt3_token_len":523,"char_repetition_ratio":0.1352174,"word_repetition_ratio":0.011869436,"special_character_ratio":0.2217882,"punctuation_ratio":0.10880829,"nsfw_num_words":0,"has_unicode_error":false,"math_prob_llama3":0.9620613,"pos_list":[0,1,2,3,4],"im_url_duplicate_count":[null,null,null,null,null],"WARC_HEADER":"{\"WARC-Type\":\"response\",\"WARC-Date\":\"2023-09-27T12:46:47Z\",\"WARC-Record-ID\":\"<urn:uuid:492e672c-a889-4d5c-b349-d829428e49c8>\",\"Content-Length\":\"13197\",\"Content-Type\":\"application/http; msgtype=response\",\"WARC-Warcinfo-ID\":\"<urn:uuid:dab8e9e8-d2ab-4bc0-889b-8c5dce043faf>\",\"WARC-Concurrent-To\":\"<urn:uuid:3f0e4ad0-efc3-4ad4-9063-19c1e73c2273>\",\"WARC-IP-Address\":\"64.227.104.178\",\"WARC-Target-URI\":\"https://eprint.iacr.org/2016/051\",\"WARC-Payload-Digest\":\"sha1:JN5UAZOEFLZXVJPNBKOUMOWQLKQTP6ZQ\",\"WARC-Block-Digest\":\"sha1:LRQWOMRWC4RWETFSGOGBVUI6YIKRJ4JS\",\"WARC-Identified-Payload-Type\":\"text/html\",\"warc_filename\":\"/cc_download/warc_2023/CC-MAIN-2023-40/CC-MAIN-2023-40_segments_1695233510297.25_warc_CC-MAIN-20230927103312-20230927133312-00396.warc.gz\"}"}