Encryption method, decryption method, device, and program
An encryption/decryption method comprises by using a generalized Feistel structure in which data is divided into n pieces and mixing processing with key data is performed, diffusion processing, in which data transformation via linear operation is executed, is performed at least once between rounds of the generalized Feistel structure, wherein. As the diffusion processing, linear transformation is performed in which each of n pieces of output data is operated on by two or more pieces of input data. The method is adapted for encryption or decryption.
1. An encryption/decryption method, wherein:
by using a generalized Feistel structure in which data is divided into n pieces and mixing processing with key data is performed, diffusion processing, in which data transformation via linear operation is executed, is performed at least once between rounds of said generalized Feistel structure under control of a hardware processor, wherein
in said diffusion processing,
linear transformation is performed in which each of n pieces of output data is operated on by two or more pieces of input data, by using an exclusive OR, the linear transformation being placed between rounds of the generalized Feistel structure to compensate for weakness of a diffusion of the generalized Feistel structure, and
wherein the method is adapted for encryption or decryption.
2. The encryption/decryption method as defined by claim 1 , wherein in said diffusion processing, the n pieces of input data are divided into two or more groups and data transformation via linear operation is performed for each group.
3. An encryption/decryption device, comprising:
a hardware processor;
a generalized Feistel structure in which data is divided into n pieces and mixing processing with key data is performed; and
at least one diffusion processing unit, under control of the hardware processor, which performs data transformation via linear operation, between rounds of said generalized Feistel structure, wherein
said diffusion processing unit
performs linear transformation in which each of n pieces of output data is operated on by two or more pieces of input data, by using an exclusive OR, the linear transformation being placed between rounds of the generalized Feistel structure to compensate for weakness of a diffusion of the generalized Feistel structure; and
wherein said device is adapted for encryption or decryption.
4. The encryption/decryption device as defined by claim 3 :
said diffusion processing unit comprises a plurality of diffusion processing units each of which receives a predetermined number of data pieces out of the n pieces of input data, and
each of said diffusion processing units performs data transformation via linear operation for the predetermined number of data pieces.
5. A non-transitory computer readable medium storing an encryption program that causes a computer to perform:
non-linear transformation processing a plurality of times using a generalized Feistel structure in which data is divided into n pieces and mixing processing with key data is performed; and
diffusion processing, in which data transformation via linear operation is performed, at least once between rounds of said generalized Feistel structure, wherein
in said diffusion processing,
linear transformation processing is performed in which each of n pieces of output data is operated on by two or more pieces of input data, by using an exclusive OR, the linear transformation being placed between rounds of the generalized Feistel structure to compensate for weakness of a diffusion of the generalized Feistel structure; and
wherein said program is adapted for encryption or decryption.
6. The non-transitory computer readable medium as defined by claim 5 wherein:
in said diffusion processing, the n pieces of input data are divided into two or more groups and data transformation via linear operation is performed for each group.
7. An information processing device that has a function to perform an encryption/decryption method for encrypting or decrypting data,
wherein the information processing device comprises a hardware processor,
wherein in the encryption/decryption method, by using a generalized Feistel structure in which data is divided into n pieces and mixing processing with key data is performed, diffusion processing, in which data transformation via linear operation is executed, is performed at least once between rounds of said generalized Feistel structure under control of the hardware processor,
wherein in said diffusion processing, linear transformation is performed in which each of n pieces of output data is operated on by two or more pieces of input data, by using an exclusive OR, the linear transformation being placed between rounds of the generalized Feistel structure to compensate for weakness of a diffusion of the generalized Feistel structure, and
wherein the method is adapted for encryption or decryption.
8. The information processing device as defined by claim 7 , wherein in said diffusion processing, the n pieces of input data are divided into two or more groups and data transformation via linear operation is performed for each group.