Based on differential cryptanalysis,Biham et al.proposed the model of impossible differential cryptanalysis in 1999.In the field of linear cryptanalysis,there was no cryptanalysis which made use of zero-correlation linear approximations until the model of zero-correlation linear cryptanalysis was proposed by Bogdanov et al.in 2012.The main idea of zero-correlation linear cryptanalysis is to make use of zero-correlation linear approximations to determine whether the block cipher is ideal or not.Nowadays,the way to construct zero-correlation linear approximations is manual.Block ciphers with different structure have their own way to construct zero-correlation linear approximations.Based on this,the paper researches on the application of zero-correlation linear cryptanalysis for two block ciphers Skipjack and CLEFIA:(1)Construct zero-correlation linear approximations,according to the structure of block cipher Skipjack and CLEFIA.(2)Construct zero-correlation linear distinguisher and give the distinguish algorithm.(3)Implement the key recovery attack and analyze the data and compute complexity.Compared with the existing research on zero-correlation linear cryptanalysis,the paper constructs zero-correlation linear approximations with more rounds for block cipher Skipjack and CLEFIA.Based on this,it implements more effective key recovery attack on block cipher Skipjack and CLEFIA. |