fa مروری بر حملات مکعبی، خطای تفاضلی و ساختارهای خطی بر روی تابع کچک(SHA-3) رمز و امنیت اطلاعات Cryptology and Information Security مروری Review Article <p dir="RTL"><strong><span style="font-family:b nazanin;">در سال‌های اخیر بررسی امنیت سومین تابع چکیده‌ساز امن</span></strong><a href="file://tsclient/E/monadi/%D8%B3%D8%A7%D9%84%201395%D8%8C%D8%B4%D9%85%D8%A7%D8%B1%D9%87%202%20%D9%BE%DB%8C%D8%A7%D9%BE%DB%8C%2010/1.safkhani/safkhani.1396-06-05.docx#_ftn1" name="_ftnref1" title=""><strong><span style="font-family:b nazanin;"><span style="font-size:12.0pt;"><span dir="LTR"><strong><span style="font-family:times new roman,serif;"><span style="font-size:10.0pt;">[1]</span></span></strong></span></span></span></strong></a> <strong><span style="font-family:b nazanin;">یکی از مهم‌ترین موضوعات مورد توجه پژوهش</span></strong><strong><span dir="LTR">&shy;</span></strong><strong><span style="font-family:b nazanin;">گران حوزه رمزنگاری بوده ‌است. توابع چکیده‌ساز در رمزنگاری کاربردهای متعددی دارند. از این</span></strong><strong><span dir="LTR">&shy;</span></strong><strong><span style="font-family:b nazanin;">رو امنیت توابع چکیده‌ساز</span></strong> <strong><span style="font-family:b nazanin;">در مقابل حملات مختلف برای سامانه‌هایی که از آن استفاده می‌کنند، بسیار مهم است. حملات و تحلیل‌های متعددی تا امروز بر روی </span></strong><strong><span dir="LTR"><span style="font-size:8.0pt;">SHA-3</span></span></strong><strong><span style="font-family:b nazanin;"> اعمال شده ‌است؛ اما تاکنون هیچ&shy;کدام موفق به شکستن آن به‌صورت نظری و یا در عمل</span></strong> <strong><span style="font-family:b nazanin;">نشده‌اند. </span></strong><strong><span dir="LTR"><span style="font-size:8.0pt;">SHA-3</span></span></strong><strong><span style="font-family:b nazanin;"> بر اساس تابع کچک</span></strong><a href="file://tsclient/E/monadi/%D8%B3%D8%A7%D9%84%201395%D8%8C%D8%B4%D9%85%D8%A7%D8%B1%D9%87%202%20%D9%BE%DB%8C%D8%A7%D9%BE%DB%8C%2010/1.safkhani/safkhani.1396-06-05.docx#_ftn2" name="_ftnref2" title=""><strong><span style="font-family:b nazanin;"><span style="font-size:12.0pt;"><span dir="LTR"><strong><span style="font-family:times new roman,serif;"><span style="font-size:10.0pt;">[2]</span></span></strong></span></span></span></strong></a><strong><span style="font-family:b nazanin;"> طراحی شده</span></strong><strong><span dir="LTR">&shy;</span></strong><strong><span style="font-family:b nazanin;"> است. تابع کچک از خانواده توابع اسفنجی</span></strong><a href="file://tsclient/E/monadi/%D8%B3%D8%A7%D9%84%201395%D8%8C%D8%B4%D9%85%D8%A7%D8%B1%D9%87%202%20%D9%BE%DB%8C%D8%A7%D9%BE%DB%8C%2010/1.safkhani/safkhani.1396-06-05.docx#_ftn3" name="_ftnref3" title=""><strong><span style="font-family:b nazanin;"><span style="font-size:12.0pt;"><span dir="LTR"><strong><span style="font-family:times new roman,serif;"><span style="font-size:10.0pt;">[3]</span></span></strong></span></span></span></strong></a><strong><span style="font-family:b nazanin;"> است. در این مقاله، با تمرکز بر حمله تحلیل خطای تفاضلی</span></strong><a href="file://tsclient/E/monadi/%D8%B3%D8%A7%D9%84%201395%D8%8C%D8%B4%D9%85%D8%A7%D8%B1%D9%87%202%20%D9%BE%DB%8C%D8%A7%D9%BE%DB%8C%2010/1.safkhani/safkhani.1396-06-05.docx#_ftn4" name="_ftnref4" title=""><strong><span style="font-family:b nazanin;"><span style="font-size:12.0pt;"><span dir="LTR"><strong><span style="font-family:times new roman,serif;"><span style="font-size:10.0pt;">[4]</span></span></strong></span></span></span></strong></a><strong><span style="font-family:b nazanin;"> آخرین حملات و تحلیل‌های مطرح‌شده بر روی </span></strong><strong><span dir="LTR"><span style="font-size:8.0pt;">SHA-3</span></span></strong> <strong><span style="font-family:b nazanin;">را&nbsp; به&shy;صورت خلاصه مرور خواهیم کرد. به‌صورت دقیق‌تر، در این مقاله، حملات مکعبی</span></strong><a href="file://tsclient/E/monadi/%D8%B3%D8%A7%D9%84%201395%D8%8C%D8%B4%D9%85%D8%A7%D8%B1%D9%87%202%20%D9%BE%DB%8C%D8%A7%D9%BE%DB%8C%2010/1.safkhani/safkhani.1396-06-05.docx#_ftn5" name="_ftnref5" title=""><strong><span style="font-family:b nazanin;"><span style="font-size:12.0pt;"><span dir="LTR"><strong><span style="font-family:times new roman,serif;"><span style="font-size:10.0pt;">[5]</span></span></strong></span></span></span></strong></a><strong><span style="font-family:b nazanin;">، خطای تفاضلی و هم‌چنین حمله متمایزکننده‌های مجموع صفر</span></strong><a href="file://tsclient/E/monadi/%D8%B3%D8%A7%D9%84%201395%D8%8C%D8%B4%D9%85%D8%A7%D8%B1%D9%87%202%20%D9%BE%DB%8C%D8%A7%D9%BE%DB%8C%2010/1.safkhani/safkhani.1396-06-05.docx#_ftn6" name="_ftnref6" title=""><strong><span style="font-family:b nazanin;"><span style="font-size:12.0pt;"><span dir="LTR"><strong><span style="font-family:times new roman,serif;"><span style="font-size:10.0pt;">[6]</span></span></strong></span></span></span></strong></a><strong><span style="font-family:b nazanin;"> و پیش‌تصویر</span></strong><a href="file://tsclient/E/monadi/%D8%B3%D8%A7%D9%84%201395%D8%8C%D8%B4%D9%85%D8%A7%D8%B1%D9%87%202%20%D9%BE%DB%8C%D8%A7%D9%BE%DB%8C%2010/1.safkhani/safkhani.1396-06-05.docx#_ftn7" name="_ftnref7" title=""><strong><span style="font-family:b nazanin;"><span style="font-size:12.0pt;"><span dir="LTR"><strong><span style="font-family:times new roman,serif;"><span style="font-size:10.0pt;">[7]</span></span></strong></span></span></span></strong></a><strong><span style="font-family:b nazanin;">با استفاده از ساختارهای خطی</span></strong><a href="file://tsclient/E/monadi/%D8%B3%D8%A7%D9%84%201395%D8%8C%D8%B4%D9%85%D8%A7%D8%B1%D9%87%202%20%D9%BE%DB%8C%D8%A7%D9%BE%DB%8C%2010/1.safkhani/safkhani.1396-06-05.docx#_ftn8" name="_ftnref8" title=""><strong><span style="font-family:b nazanin;"><span style="font-size:12.0pt;"><span dir="LTR"><strong><span style="font-family:times new roman,serif;"><span style="font-size:10.0pt;">[8]</span></span></strong></span></span></span></strong></a><strong><span style="font-family:b nazanin;">شرح داده&shy; خواهند &shy;شد.</span></strong></p> <div>&nbsp; <hr align="left" size="1" width="33%" > <div id="ftn1"><a href="file://tsclient/E/monadi/%D8%B3%D8%A7%D9%84%201395%D8%8C%D8%B4%D9%85%D8%A7%D8%B1%D9%87%202%20%D9%BE%DB%8C%D8%A7%D9%BE%DB%8C%2010/1.safkhani/safkhani.1396-06-05.docx#_ftnref1" name="_ftn1" title=""><span style="font-size:9.0pt;"><span style="font-family:times new roman,serif;"><span style="font-size:9.0pt;">[1]</span></span></span></a><span style="font-size:9.0pt;"> Secure Hash Algorithm 3(</span><span style="font-size:9.0pt;">SHA-3)</span></div> <div id="ftn2"><a href="file://tsclient/E/monadi/%D8%B3%D8%A7%D9%84%201395%D8%8C%D8%B4%D9%85%D8%A7%D8%B1%D9%87%202%20%D9%BE%DB%8C%D8%A7%D9%BE%DB%8C%2010/1.safkhani/safkhani.1396-06-05.docx#_ftnref2" name="_ftn2" title=""><span style="font-size:9.0pt;"><span style="font-family:times new roman,serif;"><span style="font-size:9.0pt;">[2]</span></span></span></a><span style="font-size:9.0pt;"> KECCAK</span></div> <div id="ftn3"><a href="file://tsclient/E/monadi/%D8%B3%D8%A7%D9%84%201395%D8%8C%D8%B4%D9%85%D8%A7%D8%B1%D9%87%202%20%D9%BE%DB%8C%D8%A7%D9%BE%DB%8C%2010/1.safkhani/safkhani.1396-06-05.docx#_ftnref3" name="_ftn3" title=""><span style="font-size:9.0pt;"><span style="font-family:times new roman,serif;"><span style="font-size:9.0pt;">[3]</span></span></span></a><span style="font-size:9.0pt;"> Sponge Functions</span></div> <div id="ftn4"><a href="file://tsclient/E/monadi/%D8%B3%D8%A7%D9%84%201395%D8%8C%D8%B4%D9%85%D8%A7%D8%B1%D9%87%202%20%D9%BE%DB%8C%D8%A7%D9%BE%DB%8C%2010/1.safkhani/safkhani.1396-06-05.docx#_ftnref4" name="_ftn4" title=""><span style="font-size:9.0pt;"><span style="font-family:times new roman,serif;"><span style="font-size:9.0pt;">[4]</span></span></span></a><span style="font-size:9.0pt;"> Differential Fault Analysis(DFA)</span></div> <div id="ftn5"><a href="file://tsclient/E/monadi/%D8%B3%D8%A7%D9%84%201395%D8%8C%D8%B4%D9%85%D8%A7%D8%B1%D9%87%202%20%D9%BE%DB%8C%D8%A7%D9%BE%DB%8C%2010/1.safkhani/safkhani.1396-06-05.docx#_ftnref5" name="_ftn5" title=""><span style="font-size:9.0pt;"><span style="font-family:times new roman,serif;"><span style="font-size:9.0pt;">[5]</span></span></span></a><span style="font-size:9.0pt;"> Cube Attack</span></div> <div id="ftn6"><a href="file://tsclient/E/monadi/%D8%B3%D8%A7%D9%84%201395%D8%8C%D8%B4%D9%85%D8%A7%D8%B1%D9%87%202%20%D9%BE%DB%8C%D8%A7%D9%BE%DB%8C%2010/1.safkhani/safkhani.1396-06-05.docx#_ftnref6" name="_ftn6" title=""><span style="font-size:9.0pt;"><span style="font-family:times new roman,serif;"><span style="font-size:9.0pt;">[6]</span></span></span></a><span style="font-size:9.0pt;"> Zero-sum Distinguisher</span></div> <div id="ftn7"><a href="file://tsclient/E/monadi/%D8%B3%D8%A7%D9%84%201395%D8%8C%D8%B4%D9%85%D8%A7%D8%B1%D9%87%202%20%D9%BE%DB%8C%D8%A7%D9%BE%DB%8C%2010/1.safkhani/safkhani.1396-06-05.docx#_ftnref7" name="_ftn7" title=""><span style="font-size:9.0pt;"><span style="font-family:times new roman,serif;"><span style="font-size:9.0pt;">[7]</span></span></span></a><span style="font-size:9.0pt;"> Pre-image </span>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</div> <div id="ftn8"><a href="file://tsclient/E/monadi/%D8%B3%D8%A7%D9%84%201395%D8%8C%D8%B4%D9%85%D8%A7%D8%B1%D9%87%202%20%D9%BE%DB%8C%D8%A7%D9%BE%DB%8C%2010/1.safkhani/safkhani.1396-06-05.docx#_ftnref8" name="_ftn8" title=""><span style="font-size:9.0pt;"><span style="font-family:times new roman,serif;"><span style="font-size:9.0pt;">[8]</span></span></span></a><span style="font-size:9.0pt;"> Linear Structure</span></div> </div> <div>In recent years the security of SHA-3<a href="file://tsclient/E/monadi/%D8%B3%D8%A7%D9%84%201395%D8%8C%D8%B4%D9%85%D8%A7%D8%B1%D9%87%202%20%D9%BE%DB%8C%D8%A7%D9%BE%DB%8C%2010/1.safkhani/safkhani.1396-06-05.docx#_ftn1" name="_ftnref1" title="">[1]</a> is one of the most interesting topics in the field of cryptography. Cryptography uses Hash functions in different ways. Thus the security of Hash functions against different attacks is of vital importance. Several attacks and many analysis have been applied to SHA-3 till now but none of them could break it theoretically or practically. Keccak relies on a Sponge architecture.<br> In this paper, we focus on differential fault analysis attack and we review the latest attacks on SHA-3. Specifically, we describe cube attack, differential fault analysis and also describe zero-sum distinguisher attack and pre<span dir="RTL">-</span>image attack by using linear structures. <div>&nbsp; <hr align="left" size="1" width="33%" > <div id="ftn1"> <div><a href="file://tsclient/E/monadi/%D8%B3%D8%A7%D9%84%201395%D8%8C%D8%B4%D9%85%D8%A7%D8%B1%D9%87%202%20%D9%BE%DB%8C%D8%A7%D9%BE%DB%8C%2010/1.safkhani/safkhani.1396-06-05.docx#_ftnref1" name="_ftn1" title="">[1]</a> Secure Hash Algorithm 3(SHA-3)</div> </div> </div> </div> کچک, SHA-3, تحلیل خطای تفاضلی, حمله مکعبی, حمله متمایزکننده‌های مجموع صفر, حمله پیش تصویر, ساختارهای خطی SHA-3, Keccak, Differential Fault Analysis, Zero-sum Distinguisher Attack, Pre-image attack, Linear Structures. 3 14 http://monadi.isc.org.ir/browse.php?a_code=A-10-210-1&slc_lang=fa&sid=1 Masoumeh Safkhani معصومه صفخانی Safkhani@srttu.edu 1003194753284600512 1003194753284600512 Yes Shahid Rajaee Teacher Traning University دانشگاه تربیت دبیر شهید رجایی Mohamadamin Arghavani محمد امین ارغوانی maminarghavani@gmail.com 1003194753284600513 1003194753284600513 No Shahid Rajaee Teacher Traning University دانشگاه تربیت دبیر شهید رجایی