arXiv:2505.10790cs.CRcs.AI2025-05被引 3

用神经网络发现新积分特征,突破传统密码分析极限。

Neural-Inspired Advances in Integral Cryptanalysis

  • 用神经网络学习积分特性,构建高效搜索框架。
  • 找到12轮密钥相关区分器,比之前多1轮;15轮攻击提升1轮。
  • 适合密码学研究者、安全算法设计者阅读。

Gohr 等人在 CRYPTO 2019 的研究及后续工作表明,神经网络可发现以往未被利用的特征,为密码分析带来新视角。受此启发,我们采用神经网络学习与积分性质相关的特征,并将其洞察整合进优化的搜索框架中。实验验证了该框架在特征探索中的有效性,推动了传统密码分析方法的发展。通过对比神经网络与经典方法所得的积分区分器,发现现有自动化搜索模型常无法找到最优解。为此,我们提出一种中间相遇搜索框架,在模型精度与计算效率间取得平衡。结果将 SKINNY64/64 的11轮积分区分器所需活跃明文比特数减少,并成功发现12轮密钥相关积分区分器,比此前最佳成果多1轮。神经网络发现的区分器支持更长轮次的密钥恢复攻击:我们发现仅需1个活跃明文单元的7轮密钥无关区分器,基于比特线性组合,实现对SKINNYn/n的15轮密钥恢复攻击,优于先前记录1轮。此外,还发现8轮密钥相关区分器,进一步降低对SKINNY的密钥恢复攻击时间复杂度。

原文摘要 · Abstract (English)

The study by Gohr et.al at CRYPTO 2019 and sunsequent related works have shown that neural networks can uncover previously unused features, offering novel insights into cryptanalysis. Motivated by these findings, we employ neural networks to learn features specifically related to integral properties and integrate the corresponding insights into optimized search frameworks. These findings validate the framework of using neural networks for feature exploration, providing researchers with novel insights that advance established cryptanalysis methods. Neural networks have inspired the development of more precise integral search models. By comparing the integral distinguishers obtained via neural networks with those identified by classical methods, we observe that existing automated search models often fail to find optimal distinguishers. To address this issue, we develop a meet in the middle search framework that balances model accuracy and computational efficiency. As a result, we reduce the number of active plaintext bits required for an 11 rounds integral distinguisher on SKINNY64/64, and further identify a 12 rounds key dependent integral distinguisher achieving one additional round over the previous best-known result. The integral distinguishers discovered by neural networks enable key recovery attacks on more rounds. We identify a 7 rounds key independent integral distinguisher from neural networks with even only one active plaintext cell, which is based on linear combinations of bits. This distinguisher enables a 15 rounds key recovery attack on SKINNYn/n, improving upon the previous record by one round. Additionally, we discover an 8 rounds key dependent integral distinguisher using neural network that further reduces the time complexity of key recovery attacks against SKINNY.

密码分析神经网络积分区分器密钥恢复

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。