|
Size: 10072
Comment:
|
← Revision 34 as of 2020-01-26 20:31:17 ⇥
Size: 210
Comment:
|
| Deletions are marked like this. | Additions are marked like this. |
| Line 1: | Line 1: |
| = Advanced Encryption Standard = | Due to the removal of LaTeX from this site and substituting it with Mathjax, see the attached file: |
| Line 3: | Line 3: |
| attachment:AES-SubBytes.png | |
| Line 5: | Line 4: |
| == Evaluation Criteria for AES == | * [[attachment:Csce877Ch5Notes.tex]] |
| Line 7: | Line 6: |
| == The AES Cipher == | |
| Line 9: | Line 7: |
| == Review Questions == '''What was the original set of criteria used by NIST to evaluate candidate AES ciphers?''' {{{ In general they said: 1. Security strength equal to or greater than 3DES 2. Significantly improved efficiency 3. Symmetric block cipher with a block length of 128 bits. 4. Support key lengths of 128, 192, and 256 bits. The specific evaluation criteria: 1. Security: This referes to the effort required to cryptanalyze an algorithm. 2. Cost: Practical, Efficient enough to use on high bandwidth links and high speed applications. 3. Algorithm and Implementation Characteristics: flexibility, suitability for a variety of hardware and software implementations, simplicity }}} '''What was the final set?''' {{{ General Security: Software Implementations: Speed Hardware Implementations: small hardware size to keep cost down. Attacks on Implementations: timing attacks and power attacks. Encryption versus decryption: Are they the same... Key agility: ability to change keys quickly and efficiently Other versatility and fexibility: Parameter flexibility (other key and block sizes, change in the number of rounds), Implementation Flexibility (optimizing cipher elements for particular environments). Potential for instruction-level parallelism:The ability to exploit ILP in processors. }}} '''What is the power analysis?''' {{{ Observing the power used to detect a multiply or add operation or to see if ones or zeros are being written. }}} '''What is the difference between Rijndael and AES?''' {{{ Rijndael took different blocks sizes of 128, 192, 256. AES only takes 128. }}} '''What is the purpose of the '''state''' array?''' {{{ The state array holds the input block that is massaged through each round. }}} '''How is the S-Box constructed?''' ---- {{{#!latex2 \usepackage{amsmath}% \setcounter{MaxMatrixCols}{30}% \usepackage{amsfonts}% \usepackage{amssymb}% \usepackage{graphicx} \newtheorem{theorem}{Theorem} \newtheorem{acknowledgement}[theorem]{Acknowledgement} \newtheorem{algorithm}[theorem]{Algorithm} \newtheorem{axiom}[theorem]{Axiom} \newtheorem{case}[theorem]{Case} \newtheorem{claim}[theorem]{Claim} \newtheorem{conclusion}[theorem]{Conclusion} \newtheorem{condition}[theorem]{Condition} \newtheorem{conjecture}[theorem]{Conjecture} \newtheorem{corollary}[theorem]{Corollary} \newtheorem{criterion}[theorem]{Criterion} \newtheorem{definition}[theorem]{Definition} \newtheorem{example}[theorem]{Example} \newtheorem{exercise}[theorem]{Exercise} \newtheorem{lemma}[theorem]{Lemma} \newtheorem{notation}[theorem]{Notation} \newtheorem{problem}[theorem]{Problem} \newtheorem{proposition}[theorem]{Proposition} \newtheorem{remark}[theorem]{Remark} \newtheorem{solution}[theorem]{Solution} \newtheorem{summary}[theorem]{Summary} \newenvironment{proof}[1][Proof]{\noindent\textbf{#1.} }{\ \rule{0.5em}{0.5em}} %%end-prologue%% }}} ---- '''Briefly describe Sub Bytes.''' ---- SubBytes: Uses the S-box described above to perform a byte-by-byte substitution of the state (or input) block as show in attachment:AES-SubBytes.png In the decryption algorithm an Inverse-S-Box is used. [[latex2($S:EA \rightarrow 87$ and $S^{-1}:87 \rightarrow EA$)]]. ---- '''Briefly describe ShiftRow Transformation.''' {{{ To perform the ShiftRow transformation, we take the state and ''left circular shift'' row 0 by 0 byts, 1 by 1 byte, row 2 by 2 bytes, and row 3 by 3 bytes. To perform the inverse we use right shifts instead of left shifts. }}} '''How many bytes in ''State'' are affected by Shift Rows?''' {{{ 12 Bytes }}} '''Briefly describe MixColumns.''' ---- {{{#!latex2 \usepackage{amsmath}% \setcounter{MaxMatrixCols}{30}% \usepackage{amsfonts}% \usepackage{amssymb}% \usepackage{graphicx} \newtheorem{theorem}{Theorem} \newtheorem{acknowledgement}[theorem]{Acknowledgement} \newtheorem{algorithm}[theorem]{Algorithm} \newtheorem{axiom}[theorem]{Axiom} \newtheorem{case}[theorem]{Case} \newtheorem{claim}[theorem]{Claim} \newtheorem{conclusion}[theorem]{Conclusion} \newtheorem{condition}[theorem]{Condition} \newtheorem{conjecture}[theorem]{Conjecture} \newtheorem{corollary}[theorem]{Corollary} \newtheorem{criterion}[theorem]{Criterion} \newtheorem{definition}[theorem]{Definition} \newtheorem{example}[theorem]{Example} \newtheorem{exercise}[theorem]{Exercise} \newtheorem{lemma}[theorem]{Lemma} \newtheorem{notation}[theorem]{Notation} \newtheorem{problem}[theorem]{Problem} \newtheorem{proposition}[theorem]{Proposition} \newtheorem{remark}[theorem]{Remark} \newtheorem{solution}[theorem]{Solution} \newtheorem{summary}[theorem]{Summary} \newenvironment{proof}[1][Proof]{\noindent\textbf{#1.} }{\ \rule{0.5em}{0.5em}} %%end-prologue%% MixColumns operates on each column individually and is defined by the following matrix multiplication on state:% \[ \left[ \right] \left[ \right] =% \] In the matrix multiplication we must remember that we are doing multiplication in $G\left( 2^{8}\right) $. We do multiplication as follows:% The inverse matrix is even uglier because it contains elements such as $0x$ where $x \geq 9$. }}} ---- '''Briefly describe Add Round Key.''' ---- {{{#!latex2 Recall that the $key$ is $4-32$ bit words. and that the key block is arranged \[ k=\left[ \right] \] where each word is a column of 32 bits. to write this as a square we just break the 32 bits into 8 bit bytes per row. Then we can just $\oplus$ the state with the key to get the next state:% \[ \left[ \right] \oplus\left[ \right] \] }}} ---- '''Breifly describe the key expansion algorithm.''' {{{ We start with a 16 byte (128 bit) key and perform the following: KeyExpansion(byte key[16], word w[44]) { word temp for (i=0; i<4; i++) w[i] = (key[4*i], key[4*i+1], key[4*i+2], key[4*i+3]); for (i=4; i<44; i++) { temp = w[i-1]; if (i mod 4 = 0) temp = SubWord(RotWord(temp)) XOR Rcon[i/4]; w[i] = w[i-4] XOR temp } } RotWord(word x) performs a left circular rotation by 1 word. SubWord(word x) uses the S-Box as a lookup table to perform a substitution of each byte in the word. }}} '''What is the difference between SubBytes and SubWord?''' {{{ SubBytes performs takes a byte and performs the substitution using the S-Box. SubWord takes a word (4 bytes) and performs SubBytes on each byte in place. }}} '''What is the difference between ShiftRows and RotWord?''' {{{ Nothing really except that Shift Rows really does shift a row, and the words are stored in a column which for RotWord we can view as a row. }}} '''What is the difference between the AES decryption algorithm and the equivalent inverse cipher?''' {{{ Because Round 10 is different than the other rounds you can not just reverse the process. Plus you must use inverse S-box which is not the same as the original S-Box. similarly the SubBytes and MixCols are not there own inverse, thus the decryption can not be the same as the encryption. }}} |
<<EmbedObject(Csce877Ch5Notes.pdf,width=100%,height=600px)>> |
Due to the removal of LaTeX from this site and substituting it with Mathjax, see the attached file: