The additive differential probability (ADP) of a modified version of the F-function of TEA with the shift operations removed. Complexity $O(n)$ . More...

#include "common.hh"
#include "tea.hh"
#include "adp-tea-f-fk-noshift.hh"

Functions
void	adp_f_op_noshift_sf (gsl_matrix *A[NSPOS][2][2][2][2][2])

void	adp_f_op_noshift_alloc_matrices (gsl_matrix *A[NSPOS][2][2][2][2][2])

void	adp_f_op_noshift_free_matrices (gsl_matrix *A[NSPOS][2][2][2][2][2])

void	adp_f_op_noshift_normalize_matrices (gsl_matrix *A[NSPOS][2][2][2][2][2])

void	adp_f_op_noshift_print_matrices (gsl_matrix *A[NSPOS][2][2][2][2][2])

double	adp_f_op_noshift (gsl_matrix *A[NSPOS][2][2][2][2][2], uint32_t k0, uint32_t k1, uint32_t delta, uint32_t da, uint32_t db)

double	adp_f_op_noshift_exper (uint32_t k0, uint32_t k1, uint32_t delta, uint32_t da, uint32_t db)

Detailed Description

The additive differential probability (ADP) of a modified version of the F-function of TEA with the shift operations removed. Complexity $O(n)$ .

The F-function of TEA with the shift operations removed is denoted by F' and is defined as: $y = F'(k_0, k_1, \delta |~ x) = (x + k_0) \oplus (x + \delta) \oplus (x + k_1)$ .

Author: V.Velichkov, vesse.nosp@m.lin..nosp@m.velic.nosp@m.hkov.nosp@m.@uni..nosp@m.lu

Date: 2012-2013

Function Documentation

double adp_f_op_noshift	(	gsl_matrix *	A[NSPOS][2][2][2][2][2],
		uint32_t	k0,
		uint32_t	k1,
		uint32_t	delta,
		uint32_t	da,
		uint32_t	db
	)

The additive differential probability (ADP) of a modified version of the F-function of TEA with the shift operations removed, denoted by F' and defined as:

$y = F'(k_0, k_1, \delta |~ x) = (x + k_0) \oplus (x + \delta) \oplus (x + k_1)$ .

Complexity: $O(n)$ .

Parameters

A	transition probability matrices for computed with adp_f_op_noshift_sf
k0	first round key.
k1	second round key.
delta	round constant.
da	input difference.
db	output difference.

Returns: $\mathrm{adp}^{F'}(k_0, k_1, \delta |~ da \rightarrow db)$ .

void adp_f_op_noshift_alloc_matrices ( gsl_matrix * A[NSPOS][2][2][2][2][2] )

Allocate memory for the transition probability matrices for $F'$ .

Parameters

A	transition probability matrices for .

See Also: adp_rsh_xor_free_matrices

double adp_f_op_noshift_exper	(	uint32_t	k0,
		uint32_t	k1,
		uint32_t	delta,
		uint32_t	da,
		uint32_t	db
	)

The additive differential probability (ADP) of F' (a modified version of the F-function of TEA with the shift operations removed) computed experimentally over all inputs. Complexity: $O(2^{2n})$ .

Parameters

k0	first round key.
k1	second round key.
delta	round constant.
da	input difference.
db	output difference.

Returns: $\mathrm{adp}^{F'}(k_0, k_1, \delta |~ da \rightarrow db)$ .

See Also: adp_f_op_noshift

void adp_f_op_noshift_free_matrices ( gsl_matrix * A[NSPOS][2][2][2][2][2] )

Free memory reserved by a previous call to adp_rsh_xor_free_matrices.

Parameters

A	transition probability matrices for .

void adp_f_op_noshift_normalize_matrices ( gsl_matrix * A[NSPOS][2][2][2][2][2] )

Transform the elements of A into probabilities.

Parameters

A	transition probability matrices for .

void adp_f_op_noshift_print_matrices ( gsl_matrix * A[NSPOS][2][2][2][2][2] )

Print the elements of A.

Parameters

A	transition probability matrices for .

void adp_f_op_noshift_sf ( gsl_matrix * A[NSPOS][2][2][2][2][2] )

S-function for a modified version of the TEA F-function with the shift operations removed, denoted by F' and defined as:

$y = F'(k_0, k_1, \delta |~ x) = (x + k_0) \oplus (x + \delta) \oplus (x + k_1)$ .

Parameters

A	zero-initialized set of matrices.

Returns: Transition probability matrices A for .

$A[j][2][2][2][2][2] = A[j][k0[i]][k1[i]][\delta[i]][da[i]][db[i]]$ , where

: dummy variable for future use.
: the i-th bit of the first round key.
: the i-th bit of the second round key.
$\delta[i]$ : the i-th bit of the round constant:
: the i-th bit of the input difference.
: the i-th bit of the output difference.

Functions

Detailed Description

Function Documentation