128ビットブロック暗号 Camellia アルゴリズム仕様書(第2
Contents
1. O 14 32 19910 movzx 000000000000000000000000000000000 Alpha C98 extb1 00000000000 0 00 2000000 000 1111 111 P6 movzx eax ebx ecx edax Z R OOOOOOO4OOOOOOOOOOOOOOOOOOA 0000000000 0000000000 0000000 0 00 200 000000000000 0000000020000 1 DDD O 0 0 0 00 00 000 000 00 0 0 00 4000 000000000000 c3 00000000 0000000000000 CameliagOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO 000000000000000000000 0000 00 align O000000000000000000 0000000000 000000 000000000 000000000000 000000000000000000000000000000000 00000000000 UU 0000000000000 00000 0000 000000000000 0000000000 0000000000000 00000000000000000000000000000000 00000000000000 0 0 0 000000 0000 0000000000000000000000 00 00 intrinsic N0000 0000000000000000000000 00 0000 OIA 320000000000 Visual2. R 64 L 64 kwz 64 kwa 64 Copyright NTT and Mitsubishi Electric Corporation 2000 2001 12 4 FDO 41 5000000000000 FOUUU F LxL L 60 60 Yeea P S X 6a k ga 4600000000 44000 5000 42 FLOO FLOUUU 68000 0000000000 FL LxL L Xe s ll man klrggllklrea Vusalloza 0000 Yrs 3139 klr 2 amp 1 O X n a2 7 63 aan U Kln a2 O Xi s 43 FL 0000 72000000 00000000000 Ep EIS L rosa Kaze krasa Kusel X R 32 000 0 Yro U klg a2 Yr 32 Aras Nklz 3 lt 1 O YR 32 44 SOO SOOO S L L Llc 3 8 llaca lg gg talls us us alo ale Copyright NTT and Mitsubishi Electric Corporation 2000 2001 13 ls aus Dg s2 lx8 Iya sa lats las slag 566 s2058 las sa lets ra m sa l7 8 le 51 86 00004000000 41 sa 5 4 0000000 4500000000 4 5 000 Camellia OOO 4000000 O 669 0000 CF2 00000000000000 0000000000000 40 50 6000 7000000 0000000000000000 51 B B ma h g f 0xc5 O x g O 0x6e 9 B 5B 268 si z g a 3 B 5B ra s1 2 8 gt 1 S4 B 5B
3. branch number 000000000000000 0210 000000032000 CPU A000 OOOO HE 1200 000000000000 00000000 0000000000 100 PONDO ngagagi E3 000 000000000000000000000006 0 000000000000000000 00000000000000 GF 00 00000000000000000 200 000000 000 0 00 000 000 00000000 200000000000000 27 000000000000000000 000000 GF2 O 0000000000 000 0000 000 00000 0000 0 0000 OU n OU E DODO 00000000000 Camella 000000000000 D GF 000 0 000 000002000000 0000000000 629090000000 000000000000000000004000000000000000000000 99 1 0000000 00000000 Copyright NTT and Mitsubishi Electric Corporation 2000 2001 35 00000000000000006 0 00000000 6GF 2 00 0000000000 0000000000000006 2900000000000000000000000000 000000 MTYYSS U 00 0 GF2 0N00 000000000000000 20000000 000000000 GF 2 00 0000000000 EA FLUUU FL DOD FLOOO FL NON 0000000000000 FeistelO Hu 60000000000000 100 00000000000000000000000000 Feistel 0000000000 ul 0000000000000000 0 Camella 0 0 0 60000000000 0000000000000000000600 100000000000 7200000000
4. 00000000000000000 0000000000000 amelia 0000000 DUDUL NUNO 9 4 GF 0000000000000000 0000000000 000080080 GF2 L3 Lu Copyright NTT and Mitsubishi Electric Corporation 2000 2001 34 0000000000000 00 000000000000 000000 000 6 thefly O 320000 RAMOOO 19200 poo 2560000000 60000 00000 E OOOO 1 FOO CamelliaQ 0000 00 00 F00 0000000E20 KMA 98 D 00 0 020 Camellia 8000000 00000000000 2000000 SPN Substitu tion Permutation Network Y Y Feistel 000000 00000000000 000000000000000000000 OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOCOOOOOOOOOOOOOO 0 00000000000000000000000000 600000000000000000 0000000 E 2 PDO Camellia 098000 00 0 0 820 00 0 9810 00 0000000000000000000000000000
5. L g gt 81 2 421 000 f8ag0000000000000 f B B ayq lla llasa llasa llasa lara llasa 11920 llosa ban 11950 Iban Ho bsa 000 0 bi ag Daz b 07 1 as Copyright NTT and Mitsubishi Electric Corporation 2000 2001 14 ag a bs az bs a Das b7 O bg 6 a4 g B B 1 1 11 1 lasan asa llasa asa laz llasa bic ba bac llosa 1105 1 Ibra llosa 0000 bg bra bea bsa ba bza boo bio2 8 1 8 Fara 4 asa 4 aso a4 030 4 930 4 a10 8 0 9 000 0000005 00 6 25 TONDO 000 Ua 8235 GF 63 0 6560 1 01 8 BA PA OOOOe e 1 00000000000 h B B ma 11 1 lasan asa asa asa lara llasa bia 1021 1 Iba llosa 1105 1 llora llosa 000 0 b as a Daz b2 ag O a2 b3 az ba a2 bs az O bg O a1 a bg a6 a Copyright NTT and Mitsubishi Electric Corporation 2000 2001 112 35 134 166 139 223 20 254 170 16 135 82 233 120 114 64 224 70 13 77 23 191 40 253 85 32 15 164 211 240 228 128 0000000000 0 31 0 112 s1 1 130 130 239 184 225 13 76 88 68 208 196 92 155 121 152 4
6. X 2 8 X 18 Xr 32 Y 1 32 gt ki 64 Naka 178 Es C A GE P GE a 07 27 Sch D GE GE 151 s Fe lt s 5 JS DS KU GE Y 4 24 N N KU GE KU E 23 HAB LD Y G GE 22 LA KAN GE XD GE ZL S an KD GE POU U 5 FOO X 64 Jeu XR 32 77 32 YR 32 kl 1432 K i 32 KO kl R 32 kl L 32 lt Y R132 X32 XR 32 Y 64 X 64 gt 7 FL 28 8 578 8 Z 58 Z 48 Z 3 8 52 8 3 5 76 Copyright NTT and Mitsubishi Electric Corporation 2000 2001 23 K 128 Kr 128 Y 1 64 F bo 22 64 1 F LP K R128 K 1 128 Exe 5464 F F D a Ree 24464 VT 664 F F LP BE ce ee K 4 128 K pr128 0 8 0000000 Copyright NTT and Mitsubishi Electric Corporation 2000 2001 Camellia 0 00000 B 000000 1280 00 1 01 DO 01 00 0 67 1920 000 01 00 DO 01 0 0 0 b4 2560 00 0 01 00 0 01 00 0 9a 23 23 67 23 11 23 cc 45 45 31 4
7. Rijmen AES Proposal Rijndael 1998 http vuv esat kuleuven ac be rijmen ri jndael A Fog How to optimize for the Pentium microprocessors 2000 http www agner org assem Intel Corporation ntel Architecture Software Developer s Manual Volume 2 Instruc tion Set Reference 1999 You can download the manual from Intel s developer site http developer intel com T Jakobsen and L R Knudsen The Interpolation Attack on Block Cipher In E Bi ham editor Fast Software Encryption 4th International Workshop FSE 97 Volume 1267 of Lecture Notes in Computer Science pp 28 40 Berlin Heidelberg New York 1997 Springer Verlag L R Knudsen Truncated and Higher Order Differentials In B Preneel editor Fast Software Encryption Second International Workshop Volume 1008 of Lecture Notes in Computer Science pp 196 211 Springer Verlag Berlin Heidelberg New York 1995 Copyright NTT and Mitsubishi Electric Corporation 2000 2001 39 KMA 98 M Kanda 5 Moriai K Aoki H Ueda M Ohkubo Y Takashima K Ohta and KSW96 M94 M97 MIYY88 MT99 RDP 96 W99 0000 Matsumoto A New 128 bit Block Cipher E2 Technical Report ISEC98 12 The In stitute of Electronics Information and Communication Engineers 1998 in Japanese J Kelsey B Schneier and D Wagner Key Schedule Cryptanalysis of IDEA G DES GOST SAFER and Triple DES In N Koblitz editor Advan
8. SP3 y3 0 53 43 sais 0 53 43 3 3 0 SPilya salya salya 0 sa ya 0 0 salya salya 3 SPs ys 0 salys 52 45 s2 Ys 0 s2 y5 s2 us s2 ys SPetye ss vs 0 53 y6 53 y6 3 76 0 53 y6 53 y6 SPr y7 sa uz salyz 0 saly7 salyz 54 97 0 sa y7 SPs ys 51 y8 si ys 81 0 si ys 51 ys 8 Ys 0 0000000000000 21 25 23 24 25 26 1 28 D SP yi i 1 00000000000000 00000 8 0000000 7 00000 KB 16 00 0000000 00000000000000000000 3000000000000 000000000000 SPaly s sr sily sily salu si u si u si u SPa y saly saly salu salu salu salu salu s2 y 4 SP y ss y ss v s3 y saly 3 y s3ly s3 y saly SPs y sa y saly saly saly saly saly saly saly CO 0000000000 0000000000 490000000000 00000000000 U mauu 8 0 7 00 0 0 8 00000 KB 8 00000 AlphaQ 0000 000000000 00000000000000000000000000 Oza 000 D U D UU D DU 00000000 00 14 3209910 O Pentium with MMX technology O U 0000 0 144 Pentium 1111 1 UD U pshufel DUDU 00 00000000000 00 3 00 SP SPB SP3 SmO00000000 0000000000000 I hr a ak 21 22 23 24 25 26 27 28 SPi y1 O SP gt u2 O SP3 y3 SPalya O
9. 0 OO Cametiag 02 S0000000000000000000000 Camallia 00000000000 0000000000000 K95 JK97 0 0000 JK97 001 O B94 KSw96 0 0 0 truncated differential attacks K9s 9911 0 000 00 1199 00 BVV99 BwWo 00 000000000000 000000000 B UNO 0000000000000 0000000000000000000 lu DN DD NDN DUN 1280000000000000000000 0000000000 0000000 Camelliali 0 00 DUDU DU DUDU DU NONONO 0000000000000 000000000000000000 0000000000000 00000000000000000000 23 EE aye Camellia 00000 8000000000 s box 0000000000000 0000 100000000000 8000 CPUN CUDUDDUDUD 32000 00 64000 CPU og 0000000000000 00000000 CamellaliH 0000 000000000000000000000 0 128 0000000000000000 3200000000000000000000 000000 O Pentium HAHO Athlon 0000000 0008000000000000 000000000000 0000000000000 0000000000000
10. Cas 0 U Lana 0 D DD 0 U O 0 C128 kwaca kW4 6a Raca Lauen U 0 DU 8 46 r 2400 1280 00000000000 Er 19 1370000 000000000 Rr 1 L e F R kr Ip RH r 19 13 70 000000000000 Ry 4 L F R kr L4 Ry FL R 3 kla r 1 6 Li ED Ba kla r 1 6 1 DD 506660 U 00000000 1280 00 00 000 000 kuwasa 0 O 0000000000000000000 0 0 Maas 06691 064 kw 64 ll kw U U U U 34 0000000 Camellia D 0000000000200 28000000 Kraz Kraz OOO 0400 640 D D DD Kraco Kroes Keres DODODO D DD D DB 000000000000 0000 Kaz Kraz 098 0 280000 Ka Krazll Erre Krros Kree 920000 Kese Kraos ras 2560 000 Kraz Kris Ker 00000 Kraz Khni sa llKn sa Copyright NTT and Mitsubishi Electric Corporation 2000 2001 10 000000000 85000000 200 28000000 Kaos OOO 0 OOO 120000 256000 000 0000 0 0 0 0 0 000 Kraz 000000000000000 00020000 Z264 OOOO 0000000 00 0 0 0 ros 0000000000000 5 364 Z464 000 00 2 0000000000000000 000 Kaaa UU 0 00 35028 U U 0000 00 D E564 6900 DUDU 020000000000000 00 0 0 0 0 0 0 00 0000800200000 00000002000 1600000002000 16000000 tu 111411 10000 OU kwyes Fa sa Klo o4 O 17028 Arcos K
11. HM STYU 2 200000000000 M97 MISTY Camelia DUDU N10 00 000000000000000000 0 Camellia OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO Do0000000000000000000000000000000000000000000 0 1000 0000000000000 0000000000000 00000 0000000000000 0000000000000000000 0000000 00000000 OR D0 0 00080000000000800000000000000 0 0000000000000000000000000 E5 0000000 00000000000000000000000 LUUDUDUUDUUDDDUDDUUDUODUDODUUDDUDDUDDUUUUU 2 1280 00001920000026000000000000000000000000000 00000000000000001280000000000000 000000000000 0000000000 3 0000000000000000000000 10000000000000000000000000000000000000000000 key agility 00000000000000000000 0000000000 on thefiy 0008000000000 5 D on the fly Y 000000 OOOOOOOOOOOOOOOOOCOOOOAOOOOOOOOOOOOOOOOOOOGO Rijndael DR98 Serpent ABK98 00 0000000000000000000 000000 0000000000000000 Copyright NTT and Mitsubishi Electric Corporation 2000 2001 36 6000000000000 7 0 0000000000000000000 00 10 20000000000000000000
12. V SP ys O SPalys O SPs y6 SPaly7 Copyright NTT and Mitsubishi Electric Corporation 2000 2001 31 000 00000 4000000 4000000000000 00000000000000000 00000 8 0 000000 7 000 1 00000 8 3200000000 OO 1 00 0 Camella 0 0 00 00 0 0 00 00 00 000 0 000 0 56000000 SPinoty sily sily si SPo22 y 0 saly sal SPso33 y s3ly SPuosly Sali saly 0000000000000 21 22 23 74 25 26 77 28 00000000000 0000000000 00 SP1110 48 SPo222 Y5 SP 110 y1 O SPo222 y2 n 21 25 23 24 e U Ss 00000 KB 4 111 11 1111 1 Mu Lu 1111 E Uu LEE HE D S P3933 vs D S P3933 Y3 0000 5088880 000000000 000000000000 0000000000000 y SPoooly s2 y say y y 0 s1 y 0 0 y 0 y sa y D 51404 Y7 D Pao D SPuio ys SPo222 ys SP3033 y6 SPasos ur 21 Z2 23 24 Dg 25 26 27 28 Da 000000000000000 D SPiiio yi D SPio01 y1 D S Po222 y2 D S P oo y2 D S P3033 Y3 D SPasos ya D S Po330 43 gt SPoosa ya Copyright NTT and Mitsubishi Electric Corporation 2000 2001 32 00000 12 00000 KB 8 0 2 8 00000000 000000000000000
13. and Mitsubishi Electric Corporation 2000 2001 28 00003900 0000000000000000000000 LOO 200000000 0000000 C24 0000000000 0 08 8 09 P S X 6 P S X erpoo000009000000000 0000000000 0 2 5 SOO s GF DO000000000000000000 000 0GF o000000000 0000000000000 00000000000000 4000 0000 00000000000000 800000000000000000000 082 s3 000 BU 32 ss 340 000 1000000000000000000 0000 45000000 Java 1 D virtual machine 00088000000 00000 0000000000 OO 2000000000000000 sila swa 80000000000 C 2 6 3200000000 Gr 2 21 22 23 24 25 26 27 28 U Z Zh 21 25 23 24 25 26 27 28 0000 500 POON 000000000000000 2 ZL ZR 8 Zn Zn O Zr 16 21 Zr Zn3 8 ZR ZR Z ZR Zr 21 00000000 0 00 0 0 00 0 020 0 20 0000 000 02020 0 2000 Zr 142 E Zr ZL ZR ZR 8 Z 8 ZR ZrROZL Z gt ZL ZR ZR 6 Zr 8 ZR ZrROZL 2 Zn Zr Z Copyright NTT and Mitsubishi Electric Corporation 2000 2001 29
14. word Qs B 0000 00000000 2000000000000 0000000000 e 0000000000 000000000000 0000000000000000 06000000000000000 000000000000 0000000000000 000000 000000000000 000 D24pp000000 0000000000000 23 000 e 000000 B gt 000000000 n 000 u DO z 0 1000 Copyright NTT and Mitsubishi Electric Corporation 2000 2001 5 24 000000000 00000000000000 big endian D 0001280000000 9 63 0 0200 640 0 0000 Lis i 1 20 400 320 000 D D Wis 1 2 3 4 0 1600 8000000 Biq i212 1900 000 2800 1000000 Ep gt 1 2 128 0 000000000 0000000 Qaz L 4 L2 64 Wi so Wasa Wasa Wasa Bys Ba s Bais B43 7 Biss 3 8 YANI ZANZI lp Ei25 1 Ei zer 19127 1 E1280 Q ass 0x0123456789ABCDEF00 1122334455667 7 12 Lien QL 64 0x0123456789ABCDEF ea Losa nou 0x0011223344556677 54 Wig Line 050123456735 Was 1 8 32 O0x89ABCDEF 30 W332 Lor s 0 00112233 3 Was Lars 0x44556677 32 Bue 03016 Bas 0x23 Bag 0x45 Bas 0 57 Bris 0x89 Des OxAB g Brig OxCD g Bs 8 OxEF g Bog 0x00 Bio s 0x11 g Bii s 0x22 8 Dias 0X33 6 0x44 Bras 0x55 Biss 05660
15. 0 223 113 195 26 152 176 136 161 137 184 55 242 49 14 80 44 107 175 57 154 203 58 207 160 0 131 216 167 6 185 211 88 214 95 114 53 151 116 159 65 177 79 12 115 167 236 147 143 202 102 194 97 178 125 72 2 38 140 106 85 123 217 39 31 149 204 133 194 101 250 144 76 25 212 170 246 179 69 124 213 251 52 222 195 161 163 205 200 159 231 248 187 103 138 248 171 247 104 189 135 67 71 155 145 63 207 241 119 39 25 235 71 204 126 27 181 137 247 74 55 110 70 238 201 78 50 215 142 153 252 54 107 19 239 148 110 220 140 221 147 U 4000 si 192 165 31 93 176 118 17 122 98 117 144 198 188 113 172 67 129 75 62 186 97 236 34 244 196 234 33 141 121 226 89 134 229 33 206 61 45 5 28 145 151 219 51 59 142 186 10 193 228 237 62 217 116 109 50 36 84 138 115 129 41 212 54 21 5000 203 66 157 122 90 10 56 35 47 183 102 118 29 117 20 131 201 219 124 179 232 218 100 72 168 21 230 82 169 108 42 133 14 48 1 18 183 15 8 91 3 103 150 245 37 73 227 2 11 28 96 36 111 30 16 182 206 45 235 74 146 199 155511255 158 0 0 HET 87 79 220 90 43 169 156 232 30 230 246 111 249 171 42 173 174 158 185 180 86 83 57 209 60 205 237 222 243
16. 0 00 id camellia128 cbc OBJECT IDENTIFIER 1 iso 1 member body 2 392 200011 61 security 1 algorithm 1 symmetric encryption algorithm 1 camellia128 cbc 2 OO 1920 00 BC0 00 id camellia192 cbc OBJECT IDENTIFIER 1 iso 1 member body 2 392 200011 61 security 1 algorithm 1 symmetric encryption algorithm 1 camellia192 cbc 3 OO 2560 00 CBCD UU id camellia256 cbc OBJECT IDENTIFIER 1 iso 1 member body 2 392 200011 61 security 1 algorithm 1 symmetric encryption algorithm 1 camellia256 cbc 4 00000000000 000000000000 00 D DUDU 0000 Camelia 0 00 BO 000000000 Camellia 0 11 000000 000000000 0 0000000 32000 640 0 0 00 0000 00000000000000000000 O ASIC FPGA 000000000000000000000 0 Camelia 0 0000 0 0 http www security melco co jp D 0000000090 n A00 D K Aoki Practical Evaluation of Security against Generalized Interpolation Attack IEICE Transactions Fundamentals of Electronics Communications and Computer Sci ences Japan Vol E83 A No 1 pp 33 38 2000 A preliminary version was presented at SAC 99 ABK98 R Anderson E Biham and L Knudsen Serpent A Flexible Block Cipher With Maximum Assurance In The First AES Candidate Conference 1998 AUOO K Aoki and H Ueda Optimized Softwa
17. 0 000 SAS OE CEG 010101 dle kaban sare Duy KA SARA AA alo Land 6 2 HEB BUDE tetas CAE Endiani a a le es a ag C22 Little endian OO 100000000 0 2 3 000000000000 whitening es Sanam A APA AA heb e E et s CO SOE sas Ae MAA ass 7 CA BN See A Na C2 TB HER Y a A ES ss A COS ES eases SES SSS Bawa aN ra e en CTE A EE LT D 0000 E OOOO OAS EET Ne NNN NNN A Bos PN e K ege oh Gem Arad iv era so prd ep mq EFE DE HEEN Bo DEAD ass ele ma de are ana ak age dra 12 12 12 13 17 18 24 24 24 24 25 25 25 25 25 25 26 26 26 26 26 27 27 28 28 28 29 32 32 33 Copyright NTT and Mitsubishi Electric Corporation 2000 2001 F 0000000 000000000 H 00000000000 36 37 37 Copyright NTT and Mitsubishi Electric Corporation 2000 2001 4 1 0000 Camelia 000 00 0 0 0 0 0 0 0 0 Camella UU 0 000 Uu 280000000 128000 192000 26000000000000000 2 ES EE a UH 21 DD 000 0 0000000 168000000 22 DD 000000000000000000 BO 8000 tel D 00000000000000000000000000 B GF 2 0000 e WO 320 00 word 0 00000 000000000000 W B 0000 LO 64000 doublevordiu 0000 000000000000000000000 L B 0000 QD 1280 00 quad
18. 0 Bigg Eo Em y Bw Ow Ba 90 Esa y Ea Ba ta 00 Eza 101 Eiosa 1a Ej la Eisa QG Eje la Fira 10 Baan 10 Qos K i250 E1260 Era 0x02468ACF13579BDE0022446688AACCEE 128 Copyright NTT and Mitsubishi Electric Corporation 2000 2001 3 Camellia 31 00000000 Ma28 C 128 K kwis ku 6a Elu 64 OU 000 1280 1920000 25600000000 n 1280 000000 1 2 3 4 u 1 2 18 v 1 2 3 4 192000 260000000 4 1 2 3 4 u 1 2 24 1 2 6 FD00060000000 3000000 69000 00060000000 1660000000 FLDUL 0640000000 Seef D DD DD 8 0000640000000 Ye 0000000 FL20000640000000 64000000 ben D 0000060000000 3660000000 SODO 060000000 00000 064000 0000 Yes 0000000 P000060000 Xe 000000640000 Ys 0000000 00000000 80000000 i 1 2 3 4 Copyright NTT and Mitsubishi Electric Corporation 2000 2001 7 32 00000 3 2 1 1281 00 000000 1280 00000000000000 100000000000 01800 Feist 00 FZ FL FL FL 000 200000 6000 20000000000000 1000000000000000 0000000000008 whitening 1 00000 00000000000000000 KB kwea t 1 2 3 4 kupa u 1 2 18 26 1 2 3 4 0 000000000000 00000000000 3400000000 00000000 Mass kwieyllkw
19. 0000 33 OOOO 3 3 1 1280000000 Camellia OOO 0000000000000 0000000000 000000000 1280 0000000000000 3000000000000 1800 Feistl oo FL FL 1 DO00 0000000000 FL FL 000 200000 6000 20000000000000 OOOO 100 000 0000 0 00000 0000000000000 whitening O 00000 00000000000000000 KB 800 t 1 2 3 4 kupa u 1 2 18 kl ay 1 2 3 4 0 000000000000 0 0000000000 3400000000 Cas 0 ksa Raten Liss DD DD DD DD Caz kusa 464 ustellen DO O00 000000 r 1800 10000000000000 Or 123 70000 1 Lr D F R kr Lr1 RH r 13 70000 000000000 Ly BF R kr K Rey FE R 1 Elan musl Li FL 1 kl 3 91 000 Lowa U Ros 00 0000 2800000000 DD kwi OO 0000 00000000000 Mazs Low Ho oa O kwasa kwasa 0 U U U Copyright NTT and Mitsubishi Electric Corporation 2000 2001 9 3 3 2 1920 00 25600000000 192111 11 260 00 00000000000 400000000000 02400 Feistel HER FL FL NDOO 0000000000 F0 FL 000 300000 6000 12000 18 00 100000 0000000000 0000000000000 whitening 0 00101 kw 1 2 3 4 kuwa u 1 2 24 Haan 1 2 3 4 v 1 2 6 000000
20. 0000 0000 00000000000 00000000000000 OOOOH Copyright NTT and Mitsubishi Electric Corporation 2000 2001 27 000000 TE z lt 24 0xff00 lt s Sg N 1100 0 x 2924 000000000000 000000000000000000000 x 846 x x 0 00 1 lt s r gt s N 0xff00ff 000000000000 x z 0 00 1 lt lt g Oxff00ff SSEQ ODO Pentium HIQOD000000000000000 psu 00000000000 000000000000 0 9971 pshufvl O00 640000000 500 ops D 000000 0 2 2 Little endian I 00 1000 00000 e2190000000 000 F2000 F2 9000 10000000000000000 0000000000 000000000000000 ndani 0000000 000 lt 0 180000000000 little endian 0O 0000000000 320000000 0 1002111111111h2111111110 x 2x NOxfefefefe 1 gt gt 15 N Oxfefefefe 1 0000000000 000000000000000000000000 U 1 0 0 9 000000000000220 000 lt 1000 lt 1000 00 000000000000000000000 maki 00000000000000000000 0000000000000 IA 32 pandn Alpha 51 D 000000 ANDNOT Camelliag 0000000 U 00000000000000000000000000 000 9 0000000000 0 2 5 00000000000 whitening 000000000 kw ta00000000000000000 x k Gy cGy Ok c k l r kal Dk NL enl o kni 2 rQk 241 keci 5 xUl e knl Copyright NTT
21. 000000000 304000 50000 0 000000000000000000000000000000 6000 7000000000 00000 0 0 1280 00 DU 0 O0 0 D D 00 16000 228000 0000 Kano 16000 1981 00 0000 320 00 000000000000000 0120000000 2600000000000 64000000 000 F 0000000 Camellia NO 0000 e 00000000 ISECII 0 D 00 00 00 UU UU UU 00 01280 000 000 0 0 Camelliad O O ISEC2000 6 2000 51 SAC 2000 K Aoki T Ichikawa M Kanda M Matsui S Moriai J Nakajima and T Tokita Camellia A 128 Bit Block Cipher Suitable for Multiple Platforms Design and Analysis In Selected Areas in Cryptography 7th Annual International Workshop SAC 2000 Waterloo Ontario Canada August 2000 Proceedings Lecture Notes in Computer Science 2012 pp 39 56 Springer Verlag 2001 000000000 e ISO 18033 e NESSIE lETF 0 Internet Draft OO Nakajima and S Moriai A Description of the Camellia Encryption Algorithm lt draft nakajima camellia 02 txt gt Moriai Addition of the Camellia Encryption Algorithm to TLS lt draft ietf tls camellia 01 txt gt Copyright NTT and Mitsubishi Electric Corporation 2000 2001 37 G N00 000 000 Camellia 0000000000 Internet Draft A Description of the Camellia Encryption Algorithm 7 00000000000 00 000 0 H DO 128
22. 100 207 243 124 221 228 62 116 50 84 115 41 54 133 48 18 15 91 103 245 73 147 140 245 163 102 63 141 218 196 251 37 155 55 35 119 228 87 220 43 156 30 246 249 42 53 95 32 22 149 243 182 104 6000 sa 96 210 143 174 88 59 136 61 49 186 72 99 94 184 86 161 242 144 103 158 150 130 14 200 203 237 153 157 71 93 5 224 114 246 31 236 58 182 25 18 42 69 185 192 148 106 27 138 D7 000 234 94 240 83 224 157 47 60 12 197 177 24 255 127 253 56 174 11 132 242 100 191 180 241 65 26 153 34 210 226 89 164 35 166 223 254 16 82 120 64 239 225 76 68 196 155 152 40 194 7 24 128 219 135 173 129 179 75 250 146 164 241 54 107 57 203 207 216 211 147 202 194 178 72 38 106 123 171 167 110 45 149 212 78 116 15 115 123 183 252 213 21 214 69 213 52 195 163 200 231 187 25 71 126 181 247 55 70 201 154 39 175 107 16 152 11 84 202 109 249 165 91 33 52 122 165 93 118 122 117 198 113 67 33 61 145 219 59 186 193 117 142 47 168 120 232 169 48 112 132 206 137 151 68 30 187 237 217 109 36 138 129 212 21 14 183 150 37 227 178 226 43 216 139 12 126 255 159 191 95 254 81 28 227 79 90 169 232 230 111 171 173 78 214 49 168 218 75 66
23. 128 00000000 Camellia LL EB BL OD DE TEST a SCHT HK ETON KAO GRENG RER 711111 1 7 00000000 D 10g 20000 70 120 OO 20009 99 21D LIN 20010 80 300 20D 20010 90 260 UU 1 0000 2 00000000 ae Re Au AS EE A A S UE Pr oed bar lan s re Sa AAs ene Re 700 PAG sonum RL EE 3 Camellia LI SARAN ee es OR eres 3 2 B an oo zt 5 320 O N IR O EEE gt a A Rese A A 32 2 19200002550 TEO D H a re Fe SO PA SS BI Sass sos gens ta PES Spe alate Ban aNG 3 32 T920 DOO 260 ET DO 5 8 A Kaka kA 34 A A Aa A msg sese uo or etes Ole 4 Camelia 0000 ADL 282 7 bat Hija Eer E E aa E E a Copyright NTT and Mitsubishi Electric Corporation 2000 2001 AA A r 7N Sas F 77 S ee A O ARR ee ER RN RE EE AA ON PY EE A Camellia 0000000000 B 000000 1 OESTE rad AR AA AA ce aa So xs red A RR ARS b xd A MA AA A c 1 3 BE DE MAE NMAN 111101 C 1 4 Kr Kr KA NO C15 ia k00 kle DOD o br 7 CLG eS u ER Ba BAL WG eR C 1 7 1280 0000 1920 256
24. 244 87 73 133 54 66 121 180 50 238 223 177 90 198 248 64 29 81 209 96 19 136 119 101 86 23 252 63 190 162 199 160 222 13 166 204 235 17 40 105 74 113 23 172 125 82 79 146 108 105 221 99 141 128 189 77 215 80 148 46 250 158 16 Copyright NTT and Mitsubishi Electric Corporation 2000 2001 46 POO POUND 0 0000000000000000000000 P L L 17 21 8 lz s zs s lla 25 8 26 8 27 8 28 8 za llas 123011240 llall 11276 1236 0000 000000000000000000000000000000000 0000 0000 28 27 2 k e e O k e OF O 23 24 26 27 29 24 25 eT 29 23 25 26 23 24 25 26 29 26 27 z8 23 O 25 027 8 24 25 26 28 24 25 26 27 k OF KH kk O e Km O k e O O O O e O O P P m O 28 27 21 k e O 28 28 28 27 Copyright NTT and Mitsubishi Electric Corporation 2000 2001 A Camellia Mi 128 1 64 7 2066 2666 K3 64 m koa Ks 64 k 664 K1 64 1 F 2 k x64 64 F FL FLI k 2264 K7 64 ks 64 ko 64 3 64 i F klotsa Ki 164 K 12064 1 k 464 64
25. 300000 200000 000000000000000 00 0000000000003000000000000 0000000 ane P K r X 000 F Krne UD 22 m D 000 0 KrrOF Krzr OO Kant F Krro O00 5 3 0000000 022800000000 300192000 2600000000 200 100000 1280 000 1920 0000 260000 C 1 4 Kr Kr Ka 000000 O Az Kz Ka Ke 0000000 0000000000 0000000 1661000000000000000000 000 00000000000 C 1 5 kul kill kl50 00 1920 2560 000000 kis Ele k11 k12 lt 32 000000 kra ki2 kls 6 O O 0000 000000000000 0000 00000000000000000 000000000 c 1 6 000000 0000000000000000000000000 Kr Ka 80000000000 0000000000000000 Kr Ks Ka 80000 0000000000000000 DO Kr Kr Ka 0000000000000 1400000000 C 1 7 1281 00 1921 2560 00 D 000180 000000000000000000 X8000000000000000000 200 00000000000000000 Copyright NTT and Mitsubishi Electric Corporation 2000 2001 26 cis 00000000000000 800000000 C1400 000000 00000000000 161000000000 1621000000000 200000000 10 00000000000000000000Q0 0000000000000000000 3200000000 OO 1 2 0 0 0 00 0000000000 0 shrdE shal 000 0000000
26. 5 22 34 45 22 45 23 67 67 38 67 33 67 01 67 33 67 7a 89 89 54 89 89 b3 89 44 89 c 0000000000000 C 1 GG C11 00000000 po 00000000000 0000000000 0000000 0000000000000 000 fe fe 08 de de 57 ba ba 06 98 98 56 98 98 98 bb 98 91 76 76 48 76 76 d7 76 76 9e 54 54 ea 54 54 9b 54 dd 54 3a 32 32 32 32 09 32 32 75 10 10 43 10 b9 10 ff 10 09 0000 0 0 Camelia OO O UOD NON 00000000000 IDD UD WON 000000 0 00 00000 0000000 0 2000000000 00000080320 640 NON 000000000000000000000000 800 0000000000000 320 640000 0000000000000 3200000000 0000000 6400070000000 0000000000000000000000000 00000000 Camelliad O0 ODO DON 0000000000000 UL 000000000000000 MMXHH 14 3200 3200 DOMMXODO 14 320 AlphaliH 640000000 24 O 0 0 Copyright NTT and Mitsubishi Electric Corporation 2000 2001 25 C12 0000000 000000000000000000000000000 0180000000000 KOO po0000000000 000 0 000000 0000000000000 00000000000 6 1 3 0 Camelia 00000000 Feistell 0000000002000
27. 6 600 0 pragma intrinsic lrot1 II 000 0 4 010000000000000 000 0 0 0 2000 0 00000000 000 000 000 0 0 0 020 000 00 0 0 0 0000000000000000000005000000000 OU 00000000000000000000 0 0 0 000000 0 000000000000 CC CC EE a Copyright NTT and Mitsubishi Electric Corporation 2000 2001 33 Pentium D 14 329 56886 00 1990 Alpha D H rpccU 0000 98 O O 0 P60 Even 0000000 out of order 0 0000000000000000000000 00000000 0 Pentium 00000000000000 0000 NTO 0 0 0 00000000 00000000000 00 0000 Camellia O UU U Camella 00000000 1280 O 1288000000000 000000 OO AES Advanced 0000000000000000 2560 192000 228000 00000 Encryption Standard O0 00000 000000000 0000000000000 000 00 Bs930 0000 M90 0000000000000 0000000000000 0000000000 111111 DD O DO 0 0 0 0 0
28. 87 84 91 53 78 95 214 32 49 22 168 149 218 243 75 182 66 104 244 106 156 190 173 64 98 44 81 43 181 231 150 109 132 208 233 234 29 94 81 240 209 83 96 224 157 19 47 136 60 119 213 58 188 162 225 163 166 192 193 18 59 38 94 17 120 238 12 101 197 86 177 23 24 252 255 63 127 190 253 162 56 199 24 202 139 172 99 46 48 249 255 126 254 125 251 69 112 143 174 146 11 108 132 4 242 105 100 221 191 99 180 141 241 128 93 37 22 216 229 210 200 187 127 198 105 27 227 1 65 189 26 77 153 215 34 80 210 148 226 46 89 250 164 158 130 123 52 154 51 175 68 160 165 41 197 92 178 245 73 61 15 Copyright NTT and Mitsubishi Electric Corporation 2000 2001 56 145 67 83 197 239 10 127 85 195 41 244 60 57 32 112 134 139 20 170 135 233 114 130 184 13 88 208 92 121 65 247 92 240 134 38 44 34 104 98 46 205 188 76 131 20 44 175 154 58 160 131 167 185 236 143 102 97 125 140 85 22 181 215 156 TT 229 29 231 80 193 108 211 220 233 179 124 251 222 161 205 159 248 39 235 204 27 137 74 110 238 118 201 199 101 51 97 176 89 190 36 19 70 53 170 189 192 31 176 17 98 144 188 172 229 206 45 28 151 51 142 10 217 162 62 234 253 26 111 225 208 209 230
29. C 1 9 FOO 0 000000 C 1 10 Camellia 000000000000000 830000000000000000 0000000 0000000000000000000000000000000000 C2 O00000 C 2 1 Endian Camellia big endian 000000000000 U little endian O O big endian O 0000000000 Odd 00000000 000000000000 DODO BOB 0000000 000000000000 0000 endian FLOOD 0000 endiang 000000000000022000 Fl 0000 100000000000 endian 00 1800000 0000000000 000000000000000 00 0 00 00000000000000000000 22000000000 00000000000 0000 080486000 IA 320 bswapOOOOOOOOOOOOOOOOOOOOOOOO C98 Appendix AO 00 U endian 1 00 ON 0000000 0000000 000000000000 0000000 O00 32000000 0 1 DUDU l 64000000 000 00000000 000 20000000 00000000 endiaago 0000000000000 00 000 VO 0000 maski 008000000
30. F FL FL ak KL ga 1 Buga ngi H 5 64 1 K13 64 14 64 K 15664 2 k 1664 K17 64 K 18 64 3 Bd pa ng 6 64 1 F oy R 8 64 1 1280 000 Camelia D 0 0 Roca R 64 R264 R364 Rusa R 5 64 18 Copyright NTT and Mitsubishi Electric Corporation 2000 2001 k n64 Kona K3 64 k 64 K5 64 k 664 kl 16477 FL FLT Haan k64 866 K9 64 Ki0 64 KI 164 K 12164 Klar gt k13 64 K14 64 K1564 K16 64 K17 64 K 18164 lacy Kls 64 kleoa k 3109 64 K20 64 K21 64 K22 64 K23 64 K 24 64 L24 64 kw 3 64 gt R464 Q Iw Lo g4 K n64 Lir64 le k64 me k 364 L64 gt k 464 Ly 64 26 K 1164 L5 64 E k 64 gt 2 192 256 00 0 Camelia 00000 Roa Risa R64 R364 R464 Copyright NTT and Mitsubishi Electric Corporation 2000 2001 C 128 kw 5164 Cp Ig Rises L isa kired kinak
31. International Workshop Volume 1039 of Lecture Notes in Computer Science pp 99 111 Springer Verlag Berlin Heidelberg New York 1996 D Wagner The Boomerang Attack In L R Knudsen editor Fast Software Encryption 6th International Workshop FSE 99 Volume 1636 of Lecture Notes in Computer Science pp 156 170 Berlin Heidelberg New York 1999 Springer Verlag 0 2 7 O Pentium 190000000 gt O Pentium IO DH D O C270 0 0 572 SP SPs SA UDO ODO DO D 0000000000000 D HO OO
32. NDN DD 000000000 100000000000000000000 00000000000000000 800000000 00000 00000000000000000000000000 0 00000000000000000 50000000000 00 0 0 00000 800000000 0000 00000000000 00000000 NONONO NUN DD NONONO DD DD DD DD OO ND DD DD DD 000000000000 0000 000000000000000000 0000000000 000000 DO 00000000000 28 4 210240250260 27 ZA ZA 21 29 23 27 lt z4 220270 28 23 2702102202 2 23 zi 27 Z9 26 21 23 24 Z5 lt 2 24 25 6 Zi gt 22 CD Z3 O 24 00 020 00000 00000 0000000000 000000 o lt 21 z2 23 Z4 28 26 27 8 21 lt 0022025 Z9 lt OD 23 26 23 lt OD 24 027 4 OD 21 28 Z5 0023024025 Zg OQ 2 24 26 27 lt OD 21 22 27 Zg lt 0022023028 C27 OOOO 00000 SO 0 0 Copyright NTT and Mitsubishi Electric Corporation 2000 2001 30 6410000000 00000000000 00000 100000000000000000 0000 IRDP 000000000000000 6300000000000 SPi yi siya Si lya 8101 0 si yi 0 0 s1 y1 SPaly2 0 salya salya s2 y2 salya salya 0 0
33. aa VR 4 64 K17 64 K16 64 Rises AM K15 64 K14 64 k 13 64 18 64 1 F R 1 64 po RE L 1764 kre LA 04 E F nb FE FL Aaen IL L 16 64 Rica 1064 K10 64 16 64 Ed Kea K764 R35464 L 15464 k 1564 LE 4 Cm F xp AAA kl pk L 1464 14 64 1 5 64 Ka 64 F j 4 K3164 K2 64 K 164 p AA m 13 64 F xb R 0164 Lor64 KW Q Iw M128 3 1280 00 0 Camellia 0 0 O 20 Copyright NTT and Mitsubishi Electric Corporation 2000 2001 729 KW 564 R 24 64 k 24164 K 23664 K 22064 k k k 6n 21 64 K 20164 K 19 64 bay p Posen De ee 23 64 1 F gt 0 Haan kl s64 5 ko R22 64 Kig ca K17 64 K16 64 22 64 k 1564 1464 K 13 64 p Ratte 21 64 1 Fp ki Wu ECT ss koya 1 F k12 64 K 11 64 k 10664 k 9164 K a sa K 7164 kng e Y F be 9266 F khao k 664 K sea k4 64 k 3164 K 2164 k 164 M 128 4 192 256 00 Camellia 00 L24 64 L23 64 22269 Lon64 1220 64 L 19 64 Copyright NTT and Mitsubishi Electric Corporation 2000 2001 X 8 8 X 766 X 6 8 X 56 X 48 X 3 8
34. aas K 5025 U B D ODO DI UD 00000000000000000000000000 20 30000000 OOO Ares Kr 0000026040000 192000000000000000000 0000000120 000000001920 000000 260000000000 000000 000000000000 OxA09E667F3BCC908B OxB67AE8584CAA73B2 OxC6EF372FE94F32BE Ox54FF53A5F1D36F1C Ox10E527FADE682D1D OxB05688C2B3E6C1FD Copyright NTT and Mitsubishi Electric Corporation 2000 2001 11 2 1289000000000 0 3 192 2560 000000000 1 64 Kr Co x a KL o r e4 kw g4 Ur o KL lt lt 0 ros KaKo L 64 0 64 4 50 8 64 Kp lt lt 0 r 64 K1L lt lt 15 L 64 Kr lt lt 15 L 64 KL lt lt 15 Rr 64 153 64 KA lt lt 15 L 64 L 64 KA lt lt 15 R 64 45 5 64 L 64 Ki gt gt gt 15 4 R 64 Ka L 64 KL 860 4 R 64 KaA lt lt 60 L 64 L 64 K1 lt lt 60 R 64 KL lt lt 94 L 64 KL lt lt 94 r 64 R 64 A 94 r 64 L 64 KaKoa Rica R 64 Ki K111 164 L 64 KiKi
35. ces in Cryptology CRYPTO 96 Volume 1109 of Lecture Notes in Computer Science pp 237 251 Springer Verlag Berlin Heidelberg New York 1996 M Matsui Linear Cryptanalysis Method for DES Cipher In T Helleseth editor Advances in Cryptology EUROCRYPT 98 Volume 765 of Lecture Notes in Com puter Science pp 386 397 Springer Verlag Berlin Heidelberg New York 1994 A preliminary version written in Japanese was presented at SCIS93 3C M Matsui New Block Encryption Algorithm MISTY In E Biham editor Fast Software Encryption 4th International Workshop FSE 97 Volume 1267 of Lecture Notes in Computer Science pp 54 68 Berlin Heidelberg New York 1997 Springer Verlag A preliminary version written in Japanese was presented at ISEC96 11 M Matsui T Inoue A Yamagishi and H Yoshida A note on calculation circuits over GF 227 Technical Report 1188 14 The Institute of Electronics Information and Communication Engineers 1988 in Japanese M Matsui and T Tokita Cryptanalysis of a Reduced Version of the Block Cipher E2 In L Knudsen editor Fast Software Encryption 6th International Workshop FSE 99 Volume 1636 of Lecture Notes in Computer Science pp 71 80 Berlin Heidelberg New York 1999 Springer Verlag Japanese version was presented at SCIS99 V Rijmen J Daemen B Preneel A Bosselaers and E De Win The Cipher SHARK In D Gollmann editor Fast Software Encryption Third
36. re Implementations of E2 IEICE Transac tions Fundamentals of Electronics Communications and Computer Sciences Japan Copyright NTT and Mitsubishi Electric Corporation 2000 2001 38 B94 BS93 BVV99 BVV00 C98 DR98 F00 199 JK97 K95 Vol E83 A No 1 pp 101 105 2000 The full paper is available on http info isl ntt co linebreak 3 jp e2 RelDocs E Biham New Types of Cryptanalytic Attacks Using Related Keys Journal of Cryp tology Vol 7 No 4 pp 229 246 1994 The extended abstract was appeared at EUROCRYPT 93 E Biham and A Shamir Differential Cryptanalysis of the Data Encryption Standard Springer Verlag Berlin Heidelberg New York 1993 A Biryukov and D Wagner Slide Attacks In L Knudsen editor Fast Software Encryption 6th International Workshop FSE 99 Volume 1636 of Lecture Notes in Computer Science pp 245 259 Berlin Heidelberg New York 1999 Springer Verlag A Biryukov and D Wagner Advanced Slide Attacks In S Vaudenay editor Advances in Cryptology EUROCRYPT2000 Volume 1807 of Lecture Notes in Computer Sci ence pp 589 606 Berlin Heidelberg New York 2000 Springer Verlag Compaq Computer Corporation Alpha Architecture Handbook Version 1 1998 You can download the manual from Compaq s technical documentation library http vuv support compaq com alpha tools documentation current chip docs html J Daemen and V
37. zss 000000000000000 Loa U Roos U Maz 66 2 60 Boss D 000 000 0000 r 100 180000000000 07 6 120000 L Ry F L 1 kr R Lp r 6 12 00000000000 L Rr 10F Ly 1 kr R dyes L FL L kl 6 R FL HRY klar 6 000 7169 Lis 0000 00000 1280 00 000 0 00 000 3 669 kwasa U 0000000000000000000000 Caos 1718 64 218 64 kwaos Fwa ca 3 2 2 1920 00 00 2568100000000 1920000000 25000 000000000000 200000000000 02400 Feistel 000 1 0 0 0 0 F0 FL DN O 300000 6000 2000 30000 0000000000 1000000000000 0000000000000000 whitening 11100 000000000000000000 x00000 kuy ay t 1 2 3 4 kawa u 1 2 24 kle 1 5 6 0 00000 00000000 0000 0 Mass OOO kanaa ewacs 000000000000000 Loca D Ros 100000000000 Maz kw 64 kW 64 Loss oce D 0000000 OO r 100 40000000000 0 6 12 180 000 TL R 1 F L 1 kr Rr L Copyright NTT and Mitsubishi Electric Corporation 2000 2001 8 r 6 12 180000000000000 L Rr 10F Lr 1 kr L FL L kl je 1 R FL Ri kl2r 6 OOOO Roos Loa 00 000 0 D 1289000000000 kwasa kwasa 00000000000000000000 0 0 OD Cs Faa sa Loaoa kwasa kwasa O 000 FON 000000000 40000
Download Pdf Manuals
Related Search