next up previous contents
Next: Differential cryptanalysis of Up: Differential Cryptanalysis Previous: Differential Cryptanalysis

Block Differences

The fate of a difference in the plaintext block is explained in reference to figure 9. The top panel of this figure shows the difference between two runs of CA-1.0, the first applied to the all-0 plaintext and the second applied to the all-but-0 plaintext in which one bit has been set to 1. The link information is the same in the two runs. The bottom panel is similar, but here a single-bit difference is made in a ciphertext resulting from applying CA-1.0 to the all-0 plaintext. In each panel, the ciphertext is the line at the top of the panel, and the plaintext is the line at the bottom of the panel. All intermediate-level ciphertexts for the block-encryption system are shown. A 1-bit is represented as a filled rectangle, and a 0-bit is represented by a blank. The steps of decryption are shown in order reading the panel from top to bottom, and the steps of encryption are in order bottom to top. Some important points to note are 1) all positions in the intermediate ciphertexts to the left resp. right of the plaintext difference can be affected during a left resp. right subround, and 2) the link information can never be affected by a difference in the block plaintext.





Howard A. Gutowitz
Fri May 12 06:16:18 MDT 1995