I'm not a mathematician, and i would like to understand in the most concise way (if possible) why choosing linear S-Box functions makes the DES algorithm attackable. Thanks
Asked
Active
Viewed 75 times
0
-
Make them identity of the first 4 input? – kelalaka Oct 16 '19 at 13:51
-
Can you write an example ? – AleWolf Oct 16 '19 at 14:15
-
1\begin{align} S:{0,1}^6&\to {0,1}^4\ S(a,b,c,d,e,f) &\mapsto (a,b,c,d) \end{align} – kelalaka Oct 16 '19 at 15:08
-
see this answer, for example https://crypto.stackexchange.com/questions/51017/how-can-one-construct-the-weakest-s-box-ever/51030#51030 – kodlu Oct 16 '19 at 21:32
-
and this one https://crypto.stackexchange.com/questions/63693/s-box-and-its-linearity?rq=1 – kodlu Oct 16 '19 at 21:33