【摘要】 该文评估一类广义Feistel密码（GFC）抵抗差分和线性密码分析的能力:如果轮函数是双射且它的最大差分和线性特征的概率分别是p和q,则16轮GFC的差分和线性特征的概率的上界为p⁷和q⁷;如果轮函数采用SP结构且是双射,S盒的最大差分和线性特征的概率是ps和qs,P变换的分支数为Pd,则16轮GFC的差分和线性特征的概率的上界为（ps）^3Pd+1和（qs）^3Pd+1。更多还原

【Abstract】 This paper studies the security evaluation against differential and linear attacks for a class of generalized Feistel ciphers. If the round function is bijective and its maximum differential and linear characteristic probabilities are p and q, then the upper bounds of maximum differential and linear characteristic probabilities for 16-round ciphers are p7 and q7. If the round function is bijective and SP structure, the maximum differential and linear characteristic probabilities of S-boxes are ps and qs, the branch number of P is P^, then the upper bounds of maximum differential and linear characteristic probabilities for 16-round ciphers are (ps)3Pd+l and (qs)3Pd+1.更多还原