RUS  ENG
Full version
JOURNALS // Prikladnaya Diskretnaya Matematika. Supplement // Archive

Prikl. Diskr. Mat. Suppl., 2022 Issue 15, Pages 54–57 (Mi pdma579)

This article is cited in 1 paper

Mathematical Methods of Cryptography

Calculation of the differential probabilities for the sum of $k$ numbers modulo $2^n$

A. S. Mokrousov

Novosibirsk State University

Abstract: We study the differential probabilities $\mathrm{xdp}_{\mathrm{k}}^+(\alpha^1, \dots, \alpha^k \to \alpha^0)$ of the function $f(x_1,\dots, x_k) = x_1 + \dots + x_k \mod 2^n$, $\alpha^0, \alpha^1, \dots, \alpha^k \in \mathbb{Z}_2^n$, where differences are expressed using bitwise “exclusive or”. These values are used in differential cryptanalysis of cryptographic primitives which contain bitwise “exclusive or” and addition modulo $2^n$, such as ARX-constructions. We propose analytic expressions of matrices that are used for calculating $\mathrm{xdp}_{\mathrm{k}}^+$. We also study the differential probability $\mathrm{adp}^{\oplus}(\alpha, \beta \to \gamma)$ of the function $x \oplus y$, $\alpha, \beta, \gamma \in \mathbb{Z}_2^n$, where differences are expressed using addition modulo $2^n$, and describe all triples of differences whose probabilities are greater than ${1}/{4}$.

Keywords: ARX, exclusive or, modular addition, differential cryptanalysis, differential probabilities.

UDC: 519.7

DOI: 10.17223/2226308X/15/14



© Steklov Math. Inst. of RAS, 2024