仕様書フォーマット

Similar documents

*.....J.....S.q..2013B_....

卒論　提出用ファイル.doc

For_Beginners_CAPL.indd

HyRAL®FPGA設計仕様書

/* sansu1.c */ #include <stdio.h> main() { int a, b, c; /* a, b, c */ a = 200; b = 1300; /* a 200 */ /* b 200 */ c = a + b; /* a b c */ }

(Version: 2017/4/18) Intel CPU 1 Intel CPU( AMD CPU) 64bit SIMD Inline Assemler Windows Visual C++ Linux gcc 2 FPU SSE2 Intel CPU do

Informatics 2010.key

64bit SSE2 SSE2 FPU Visual C++ 64bit Inline Assembler 4 FPU SSE2 4.1 FPU Control Word FPU 16bit R R R IC RC(2) PC(2) R R PM UM OM ZM DM IM R: reserved

福岡大学人文論叢47-3

1 (1) X = AB + AB, Y = C D + C D, Z = AD + AD P A, B, C, D P = (XY + X Y + X Y )(Y Z + Y Z + Y Z )(ZX + Z X + Z X ) (2) Q A, B, C, D Q = AB C D + AB C

2011 Future University Hakodate 2011 System Information Science Practice Group Report Project Name Visualization of Code-Breaking RSA Group Name RSA C

中堅中小企業向け秘密保持マニュアル

1. A0 A B A0 A : A1,...,A5 B : B1,...,B

one way two way (talk back) (... ) C.E.Shannon 1948 A Mathematical theory of communication. 1 ( ) 0 ( ) 1

64bit SSE2 SSE2 FPU Visual C++ 64bit Inline Assembler 4 FPU SSE2 4.1 FPU Control Word FPU 16bit R R R IC RC(2) PC(2) R R PM UM OM ZM DM IM R: reserved

Informatics 2014

北斗20号-12.14

セゾン保険_PDF用.indd

(Requirements in communication) (efficiently) (Information Theory) (certainly) (Coding Theory) (safely) (Cryptography) I 1

25 II :30 16:00 (1),. Do not open this problem booklet until the start of the examination is announced. (2) 3.. Answer the following 3 proble

2016_Sum_H4_0405.ai

暗号方式委員会報告（CRYPTRECシンポジウム2012）

特集_03-07.Q3C

(300, 150) 120 getchar() HgBox(x, y, w, h) (x, y), w, h #include <stdio.h> #include <handy.h> int main(void) { int i; double w, h; } HgO

Microsoft Word J.^...O.|Word.i10...j.doc

Microsoft Word - Sample_CQS-Report_English_backslant.doc

Informatics 2015

１食品安全を主な目的とする取組

解きながら学ぶJava入門編

Java Java Java Java Java 4 p * *** ***** *** * Unix p a,b,c,d 100,200,250,500 a*b = a*b+c = a*b+c*d = (a+b)*(c+d) = 225

,,,,., C Java,,.,,.,., ,,.,, i

WAGO Profibus /-833及び三菱MELSEC Q02HCPU/QJ71PB92Dのコンフィグレーション

FX自己アフリエイトマニュアル

(Visual Secret Sharing Scheme) VSSS VSSS 3 i

PC Windows 95, Windows 98, Windows NT, Windows 2000, MS-DOS, UNIX CPU

x h = (b a)/n [x i, x i+1 ] = [a+i h, a+ (i + 1) h] A(x i ) A(x i ) = h 2 {f(x i) + f(x i+1 ) = h {f(a + i h) + f(a + (i + 1) h), (2) 2 a b n A(x i )

2007-Kanai-paper.dvi

mahoro/2011autumn/crypto/

Java演習(4) -- 変数と型 --

情報理論第5回情報量とエントロピー

サイボウズガルーン 3 管理者マニュアル

今日からはじめるプロアクティブ

1 2 STEP 1 STEP 2 STEP 3

制御盤BASIC Vol.3

altus_storage_guide

5 Armitage x 1,, x n y i = 10x i + 3 y i = log x i {x i } {y i } 1.2 n i i x ij i j y ij, z ij i j 2 1 y = a x + b ( cm) x ij (i j )

財団法人母子健康協会第三十回シンポジウム

NewBead_no17_4c_pdf.indd

Transcription:

13 1

1............... 1 1.1...1 1....1 1.3... 1............. 3.1...3....5.3...5....5.5....5.1 AVA....5. AVD...7.5.3 CC...7.5. UKV...7 3............ 3.1... 3.1.1... 3.1. 1... 3.... 3.3 AVA... 11 3. AVD...1 3.5 CC...5 3. UKV...3............... 31.1 CIPHERUNICORN-E...31.1.1...31.1....31.1.3...31. FEAL-NX...3..1...3.....3..3...3.3 Hierocrypt-L1...3 i

.3.1...3.3....3.3.3...3. MISTY1...35..1...35.....35..3...35.5 Camellia...37.5.1...37.5. (1bit)...37.5.3 (19bit)...37.5. (5bit)...3.5.5 (1bit)...3.5. (19bit)...3.5.7 (5bit)...39. CIPHERUNICORN-A.....1..... (1bit).....3 (19bit)..... (5bit)...1..5 (1bit)...1.. (19bit)...1..7 (5bit)....7 Hierocrypt-3...3.7.1...3.7. (1bit)...3.7.3 (19bit)...3.7. (5bit)....7.5 (1bit)....7. (19bit)....7.7 (5bit).... MARS...5..1...5.. (1bit)...5..3 (19bit)...5.. (5bit)...5 ii

..5 (1bit)..... (19bit).....7 (5bit)....9 RC...7.9.1...7.9. 1bit...7.9.3 19bit...7.9. 5bit....9.5 1bit....9. 19bit....9.7 5bit...9. SC...5..1...5.. (1bit)...5..3 (19bit)...5.. (5bit)...51..5 (1bit)...51.. (19bit)...51..7 (5bit)...5 iii

1 1.1 1. 1.1 CIPHERUNICORN-E FEAL-NX Hierocrypt-L1 MISTY1 Camellia CIPHERUNICORN-A Hierocrypt-3 MARS RC SC 1 1 1 1 1 1 1

1.3 : : : : x<<y : x y X[i] : X i #{P} : P Hw(x) : x Pa(x) : x V (m) : a,a1,...,am-1 GF( n ) 1 m GF( m ) 1. big endian Q 1 (quad word) D (double word) W 3 (word) B (byte) E 1 (bit) Q D D1 W W1 W W3 B B1 B B15 E E1 E E17

.1 AVA AVD CC UKV (1) AVA(Avalanche) X K f(x, K)=Y m X( X V (m) ) Y = f(x, K) f(x X, K) j AVA[m, X, j] AVA[m, X, j] = #{ Y[j]=1} #{ Y[j]=} m K( K V (m) ) Y = f(x, K) f(x, K K) j AVA[m, K, j] AVA[m, K, j] = #{ Y[j]=1} #{ Y[j]=} X K m=1, () AVD(the average number of diffusion bits) m ( ) N t Y(t) AVD[m] AVD[m] = N Hw( Y(t)) t=1 / N 3

(3) CC(Correlation Coefficient) m X n (A= Y[i], B= Y[j]) CC[m, X, i, j] CC[m, X, i, j] = n #{A B=1} #{A=1} #{B=1} ( n #{A =1} #{A=1} ) ( n #{B =1} #{B=1} ) m K n (A= Y[i], B= Y[j]) CC[m, K, i, j] CC[m, K, i, j] = n #{A B=1} #{A=1} #{B=1} ( n #{A =1} #{A=1} ) ( n #{B =1} #{B=1} ) X K m=1 () UKV(Useful Key Volume) 1 AVA (.5.1() ) a b step1) K j AVA[1, K, j] step) D step3)ukv = a (D / (a b))

. 3 (prng()) rand() (1) rand() step1) seed = R1 = prng(seed) step) seed = R = prng(seed) step3) R = R1 (R << ) step) return(r) () prng(x) prng(x) = ax mod m a = 7 5 = 17 m = 31 1 = 737.3 (1) seedk seedd step1) RK 1 step)seedd step3) RD 1 step) f(rd, RK) step5)step3 step step)step1 step5 () seedk seedd step1) RD 1 step)seedk step3) RK 1 step) f(rd, RK) step5)step3 step step)step1 step5. 5

.5.5.1 AVA (1) (WDR) 1 STmax[AVA] : AVA WDR[AVA] = (STmax[AVA] / ( )) () (RSV) (RSV) ( )N RSV = a / N a ( ) 1 a = 1 ( ) a =.5 1

.5. AVD n n/.5.3 CC CC -1 CC 1 CC ( ) n.5 /.5n.5. UKV UKV 7

3 3.1 3.1.1 (1) CIPHERUNICORN-E () FEAL-NX 5 (3) Hierocrypt-L1 () MISTY1 3.1. 1 (1) Camellia () CIPHERUNICORN-A 3 (3) Hierocrypt-3 () MARS

(5) RC () SC 19 5 9

3. 3.1 C 3.1 CIPHERUNICORN-E FEAL-NX Hierocrypt-L1 MISTY1 Camellia CIPHERUNICORN-A Hierocrypt-3 MARS RC SC UNIE FEAL HiL1 MIST Came UNIA Hi3 MARS RC SC

3.3 AVA 3. Hw ( ) 1 3 ( ) ( ) UNIE FEAL HiL1 MIST Came UNIA Hi3 MARS RC SC -. -.51. -19.5-19.7. -.1(*) -17.57(*).... -.3-19. -19.9(*) -17.7(*).. -.19 -... 1 ( 1 ) ( 1 ) -1. -17.5-1.7-17.57....(*).... -1.3-17..(*).(*).... (*3) (*3) = 1 (*1) 3 ( 3 ) ( ) -. -19.5-7.5 -... -17.7(*) -17.(*).... -.5-19.5.(*) -17.3(*).. -.19 -. (*3) (*3) (*1)UNIE, FEAL, MIST,MARS (*) (*3) 11

Hw 3.3 ( 1 ) ( ) UNIE FEAL HiL1 MIST Came UNIA Hi3 MARS RC SC 1 ( 1 ) -1. -15.99-15.95-1.3-1.3-15.73-15.93-1.5-15.9-15.7-1. 1 ( 1 ) -1. -1.11-1.1-1.15-1.7-15.5-15.1-15. -1. -15.5-1. 1 (*1) R R3 R R5 R R7 ( 1 ) -1. -.3 -.37-1. -1. -. -7.31-15.71-1. -1. -1. -1.5-1.1. -1.3-1.3-1.55.. -1. -1.. -1.1-1.19-1. -1. -15. -1.5-1.7-15.71-15.9-15.9-1.17.. -. -1.5-1.35-5.7-15.93-15.93-15. -1. (*1)Rx x R5 R5 1

3. ( 19 ) Hw ( ) Came UNIA Hi3 MARS RC SC 1 ( 1 ) -1. -15.97-15.1-15. -1. -1.3-15.1 1 ( 1 ) -1. -15.7-15.57-15. -1.15-1.11-15.91 1 (*1) R R3 R R5 R R7 ( 1 ) -1... -15.57-15.7. -15.7-15.1-1. -15.7-1. -15.71-15. -1. -1.5-1. -15.5.. -.7-1.7-1.35-5.7-15. -15.7-15.9-1.9 (*1)Rx x R5 R5 13

3.5 ( 5 ) Hw ( ) Came UNIA Hi3 MARS RC SC 1 ( 1 ) -1. -1.5-1.9-1.1-1. -1. -1. 1 ( 1 ) -1. -15.5-15.9-15. -15. -15.77-15.7 1 (*1) R R3 R R5 R R7 ( 1 ) -1... -15.3-15.91. -15.7-15.77-15. -15.1-15.9-15.5-15.91-1.1-15.1-1.19-1.19.. -. -1.7-1.35-5.7-15.5-1.7-1.13-1. (*1)Rx x R5 R5

Hw 3. ( 1 ) ( ) UNIE FEAL HiL1 MIST Came UNIA Hi3 MARS RC SC 1 (*1) W W1 W W3-1. -15.5-15.3-15.5-15.17-15.1-15.7.................... -15. -15.3-15.7-15.1-15.57.......... -15. -15. -15.5-15. -15.3-15.3-15.5-15.3-15.1-15. (*1)Wx Word#x 3 15

3.7 ( 19 ) Hw Came UNIA Hi3 MARS RC SC 1 (*1) W W1 W W3 W W5-1. -15.5....... -15. -15. -15.9-15. -15.3-15.3-15............... -15.17-15.3-15.37-15.5-15.9-15.3-15.1-15.3-15. -15.3-15.5-15. -15.3-15. (*1)Wx Word#x 3 1

3. ( 5 ) Hw Came UNIA Hi3 MARS RC SC 1 (*1) W W1 W W3 W W5 W W7-1. -15.5......... -15. -15.5-15.3-15.19-15.5-15.35 -.7-15.1-15.5.................. -15.5-15. -15.1-15. -15.51-15. -15.5-15.9-15.3-15.3-15.3-15.5-15.5-15. -15.3-15. -15. -15.5 (*1)Wx Word#x 3 17

3. AVD 3.9 Hw AVD ( ) UNIE FEAL HiL1 MIST Came UNIA Hi3 MARS RC SC 1 3 ( ) ( ) 1. 1. 3. 1. 3. 3... 3. 3. 1. 1. 9.9 13.1 3. (*) 3. (*) 1. 15.99 1.9.3 3. 3.. (*). (*) 3.7.93 5. 9.3.71.33 1 ( 1 ) ( 1 ) 1. 1. 9.1 13. 7. 31. (*) 9. 1. 1.9.3 3. 3. 5. (*) 19.9.39 (*) 3.3 1.9 3. (*3) (*3) = 1 (*1) 3 ( 3 ) ( ) 1. 1. 9.9 13.1 3. (*) 3. (*) 1.13 15.99 1.9.3 3. 3. 3.7 (*) 1.. (*).35. 9.3 (*3) (*3) (*1)UNIE, FEAL, MIST, MARS (*) (*3) 1

Hw 3. ( 1 ) AVD ( ) UNIE FEAL HiL1 MIST Came UNIA Hi3 MARS RC SC 3. 3. 3. 3....... 1 ( 1 ) 3. 3. 3. 3....... 1 ( 1 ) 3. 3. 3. 3....... 1 (*1) ( 1 ) R R3 R R5 R.1 3.7 3. 3. 31.77 31.99 3. 3. 3. 3. 3. 3.. 3.3 3. 3. 3.3 5.9.. 9.1............37 1.77.9 3.9. 55.99.9.. (*1)Rx x R5 R5 19

3.11 ( 19 ) Hw AVD ( ) Came UNIA Hi3 MARS RC SC...... 1 ( 1 )...... 1 ( 1 )...... 1 (*1) ( 1 ) R R3 R R5 R 3. 5.9.. 9.19............ 1.7. 3.9. 55.99.9.. (*1)Rx x R5 R5

3.1 ( 5 ) Hw AVD ( ) Came UNIA Hi3 MARS RC SC...... 1 ( 1 )...... 1 ( 1 )...... 1 (*1) ( 1 ) R R3 R R5 R 3.3 5.9.. 9.19............3 1.79. 3.9. 55.99.9.. (*1)Rx x R5 R5 1

Hw 3.13 ( 1 ) AVD ( ) UNIE FEAL HiL1 MIST Came UNIA Hi3 MARS RC SC 131. 3.. 1.. 115. 9.. 7. 9. 1 (*1) W 131. 131. 33. 31.35 1. 5. 1.9 1.7 5.. 115. 115. 53.13 1.5.. 7. 7. 9. 9. W1 131. 37.7 3.9 1.7. 115. 9.37. 7. 9. W 131. 3.9 7. 1.7. 115. 5.95. 7. 9. W3 131. 31.. 1.7. 115. 9.5. 7. 9. (*1)Wx Word#x 3

3. ( 19 ) Hw AVD Came UNIA Hi3 MARS RC SC 1. 115... 7.. 1 (*1) W 19.33 13. 115. 115. 1.93 5.7.. 7. 7... W1 13. 115. 5.3. 7.. W 13. 115. 7.9. 7.. W3 13. 115. 73.93. 7.. W 13. 115. 97.. 7.. W5 13. 115. 99.1. 7.. (*1)Wx Word#x 3 3

3.15 ( 5 ) Hw AVD Came UNIA Hi3 MARS RC SC 1. 115. 115.. 7.. 1 (*1) W 19. 13. 115. 115. 79. 79.3.. 7. 7... W1 13. 115. 79.7. 7.. W 13. 115. 53.3. 7.. W3 13. 115. 3.35. 7.. W 13. 115. 1135.. 7.. W5 13. 115. 17.1. 7.. W 13. 115..1. 7.. W7 13. 115. 7.. 7.. (*1)Wx Word#x 3

3.5 CC 3.1 Hw CC ( ) UNIE FEAL HiL1 MIST Came UNIA Hi3 (*) MARS RC SC 1 ( ) -9.5-9.95.... -9.7.. -.9. = 1 (*1) ( ) -9.5-9.9.... -9.5... (*3) (*1)UNIE, FEAL, MIST, MARS (*)Hi3 (*3) 5

Hw 3.17 ( 1 ) CC ( ) UNIE FEAL HiL1 MIST Came UNIA Hi3 MARS RC SC 1 ( 1 ) -7.5-7.9-7. -7.7-7.7-7.7-7. -7.57-7.5-7.7-7.7 1 ( 1 ) -7.5-7.7-7.93-7. -7. -7.75-7.7-7.7-7.71-7.5-7. 1 (*1) R R3 R R5 R ( 1 ) -7.5-1. -.1-7.1-7.77. -.13-3. -7.5-7. -7.71-7.95-7...5-7.79-7... -5.1-7.. -7. -7.7-7. -7.57-7.5-7.75-7. -7. -7.7-7. -7.77.. -1.7 -.35 (*1)Rx x R5 R5-7.5. -. -7.9-7.77

3.1 ( 19 ) Hw CC ( ) Came UNIA Hi3 MARS RC SC 1 ( 1 ) -7.5-7.73-7.7-7.7-7.73-7. -7.7 1 ( 1 ) -7.5-7.7-7. -7. -7. -7.73-7.1 1 ( 1 ) -7.5 R R3 R R5 R.. -5.5-7.9. -7.3-7.3-7.77-7.5-7.7-7.75-7.9-7.77-7. -7. -7.1.. -1.71 -.35. -.9-7.71-7.75 (*1)Rx x R5 R5-7.79 7

3.19 ( 5 ) Hw CC ( ) Came UNIA Hi3 MARS RC SC 1 ( 1 ) -7.5-7. -7.7-7.55-7.7-7.7-7.7 1 ( 1 ) -7.5-7. -7.5-7. -7.75-7. -7.57 1 ( 1 ) -7.5 R R3 R R5 R.. -5.75-7.. -7. -7.5-7.7-7.77-7.9-7.71-7.9-7.7-7. -7.7-7.7.. -1.7 -.3. -.9-7.7-7.55 (*1)Rx x R5 R5-7.

Hw 3. ( 1 ) CC ( ) UNIE FEAL HiL1 MIST Came UNIA Hi3 MARS RC SC 1-7.5-7.7... -7. -7.73.. -7.1-7. 3.1 ( 19 ) Hw CC Came UNIA Hi3 MARS RC SC 1-7.5-7. -7.9.. -7.1. 3. ( 5 ) Hw CC Came UNIA Hi3 MARS RC SC 1-7.5-7.59-7.75.. -7.75. 9

3. UKV 3.3 Hw UKV ( ) UNIE FEAL HiL1 MIST Came UNIA Hi3 MARS RC SC 1 ( 1 ) 1. 1. 1. 11.. 1. 5... (*1) 1. 1..19 51. 53.3 1. 13. 9.7.3 (*1) (*1) 3

.1 CIPHERUNICORN-E B.1.1.1 (1) AVA( 3.) () AVD( 3.9) (3) CC( 3.1) () UKV( 3.3).1. (1) AVA( 3.3) (Hw=1) (Hw=1) (Hw=1) R R3 R () AVD( 3.) (Hw=1) (Hw=1) (Hw=1) R R3 R (3) CC( 3.17) (Hw=1) (Hw=1) (Hw=1) R R3 R.1.3 (1) AVA( 3.) () AVD( 3.13) (3) CC( 3.) 31

. FEAL-NX B...1 (1) AVA( 3.) 1 () AVD( 3.9) (Hw=1) (Hw=1) (Hw=1) (Hw=) (Hw=) (Hw=) 3 (3) CC( 3.1) CC=1 # #3 #9 () UKV( 3.3).. (1) AVA( 3.3) (Hw=1) (Hw=1) (Hw=1) R R3 R () AVD( 3.) (3) CC( 3.17) (Hw=1) (Hw=1) (Hw=1) R R3 R R5..3 (1) AVA( 3.) () AVD( 3.13) (Hw=1) 1 (Hw=) 19 3

(3) CC( 3.) CC=1 # K1 #7 #13 33

.3 Hierocrypt-L1 B.3.3.1 (1) AVA( 3.) (Hw=) = (Hw=) (Hw=1,) () AVD( 3.9) (Hw=1) (3) CC( 3.1) () UKV( 3.3).3. (1) AVA( 3.3) () AVD( 3.) (3) CC( 3.17).3.3 (1) AVA( 3.) 1 () AVD( 3.13) (Hw=1) 3 (Hw=) 1 (3) CC( 3.) CC=1 3

. MISTY1 B...1 (1) AVA( 3.) 1 () AVD( 3.9) (Hw=1,) (Hw=1,) (Hw=1,) 3 7 (3) CC( 3.1) CC=1 #1 # #9 () UKV( 3.3).. (1) AVA( 3.3) (Hw=1) (Hw=1) (Hw=1) R R3 R () AVD( 3.) (Hw=1) (Hw=1) (Hw=1) R 7 (3) CC( 3.17) (Hw=1) (Hw=1) (Hw=1) R R3 R..3 (1) AVA( 3.) 1 () AVD( 3.13) 35

(3) CC( 3.) CC=1 K1 #1 K 1 # #17 3

.5 Camellia B.5.5.1 (1) AVA( 3.) 1 () AVD( 3.9) (Hw=1) (Hw=1) (Hw=1) (Hw=) (Hw=) (Hw=) 3 (3) CC( 3.1) CC=1 # # # () UKV( 3.3).5. (1bit) (1) AVA( 3.3) (Hw=1) (Hw=1) (Hw=1) R R3 1 R () AVD( 3.) (Hw=1) (Hw=1) (Hw=1) R R3 R (3) CC( 3.17) (Hw=1) (Hw=1) (Hw=1) R R3 CC=1 R R5.5.3 (19bit) (1) AVA( 3.) (Hw=1) (Hw=1) (Hw=1) R R3 1 R 37

() AVD( 3.11) (Hw=1) (Hw=1) (Hw=1) R R3 R (3) CC( 3.1) (Hw=1) (Hw=1) (Hw=1) R R3 CC=1 R R5.5. (5bit) (1) AVA( 3.5) (Hw=1) (Hw=1) (Hw=1) R R3 1 R () AVD( 3.1) (Hw=1) (Hw=1) (Hw=1) R R3 R (3) CC( 3.19) (Hw=1) (Hw=1) (Hw=1) R R3 CC=1 R R5.5.5 (1bit) (1) AVA( 3.) 1 () AVD( 3.13) (Hw=1) 1 (Hw=) (3) CC( 3.).5. (19bit) (1) AVA( 3.7) 1 () AVD( 3.) (Hw=1) 1 (Hw=) W W1 W W3 W W5 3

(3) CC( 3.1).5.7 (5bit) (1) AVA( 3.) 1 () AVD( 3.15) (Hw=1) 1 (Hw=) (3) CC( 3.) 39

. CIPHERUNICORN-A B...1 (1) AVA( 3.) () AVD( 3.9) (3) CC( 3.1) () UKV( 3.3).. (1bit) (1) AVA( 3.3) (Hw=1) (Hw=1) (Hw=1) R R3 () AVD( 3.) (Hw=1) (Hw=1) R R3 (3) CC( 3.17) (Hw=1) (Hw=1) (Hw=1) R R3..3 (19bit) (1) AVA( 3.) (Hw=1) (Hw=1) (Hw=1) R R3 () AVD( 3.11) (Hw=1) (Hw=1) R R3 (3) CC( 3.1)

(Hw=1) (Hw=1) (Hw=1) R R3.. (5bit) (1) AVA( 3.5) (Hw=1) (Hw=1) (Hw=1) R R3 () AVD( 3.1) (Hw=1) (Hw=1) R R3 (3) CC( 3.19) (Hw=1) (Hw=1) (Hw=1) R R3..5 (1bit) (1) AVA( 3.) () AVD( 3.13) (3) CC( 3.).. (19bit) (1) AVA( 3.) () AVD( 3.) (3) CC( 3.1) 1

..7 (5bit) (1) AVA( 3.) () AVD( 3.15) (3) CC( 3.)

.7 Hierocrypt-3 B.7.7.1 (1) AVA( 3.) (Hw=), = (Hw=) (Hw=1,), = (Hw=1) 1 () AVD( 3.9) (Hw=1,) = (Hw=1,) (Hw=1) (Hw=) (3) CC( 3.1) CC=1 () UKV( 3.3).7. (1bit) (1) AVA( 3.3) () AVD( 3.) (3) CC( 3.17).7.3 (19bit) (1) AVA( 3.) () AVD( 3.11) (3) CC( 3.1) 3

.7. (5bit) (1) AVA( 3.5) () AVD( 3.1) (3) CC( 3.19).7.5 (1bit) (1) AVA( 3.) 1 () AVD( 3.13) (Hw=1) 115 (Hw=) (3) CC( 3.) CC=1.7. (19bit) (1) AVA( 3.7) 1 () AVD( 3.) (Hw=1) 3 (Hw=) (3) CC( 3.1) CC=1.7.7 (5bit) (1) AVA( 3.) 1 () AVD( 3.15) (Hw=1) 9 (Hw=) (3) CC( 3.) CC=1

. MARS B...1 (1) AVA( 3.) 1 () AVD( 3.9) (3) CC( 3.1) () UKV( 3.3).. (1bit) (1) AVA( 3.3) () AVD( 3.) (3) CC( 3.17)..3 (19bit) (1) AVA( 3.) () AVD( 3.11) (3) CC( 3.1).. (5bit) (1) AVA( 3.5) () AVD( 3.1) (3) CC( 3.19) 5

..5 (1bit) (1) AVA( 3.) 1 () AVD( 3.13) 1 (3) CC( 3.).. (19bit) (1) AVA( 3.7) 1 () AVD( 3.) 1 (3) CC( 3.1)..7 (5bit) (1) AVA( 3.) 1 () AVD( 3.15) 1 (3) CC( 3.)

.9 RC B.9.9.1 (1) AVA( 3.) (Hw=1,) 1 () AVD( 3.9) (3) CC( 3.1) (Hw=1) (Hw=1) CC=1 () UKV( 3.3).9. 1bit 1bit (1) AVA( 3.3) (Hw=1) (Hw=1) (Hw=1) R R3 R R5 R () AVD( 3.) (Hw=1) (Hw=1) (Hw=1) R R3 R R5 (3) CC( 3.17) (Hw=1) (Hw=1) (Hw=1) R R3 R R5 R.9.3 19bit 19bit (1) AVA( 3.) (Hw=1) (Hw=1) (Hw=1) R R3 R R5 R 7

() AVD( 3.11) (Hw=1) (Hw=1) (Hw=1) R R3 R R5 (3) CC( 3.1) (Hw=1) (Hw=1) (Hw=1) R R3 R R5 R.9. 5bit 5bit (1) AVA( 3.5) (Hw=1) (Hw=1) (Hw=1) R R3 R R5 R () AVD( 3.1) (Hw=1) (Hw=1) (Hw=1) R R3 R R5 (3) CC( 3.19) (Hw=1) (Hw=1) (Hw=1) R R3 R R5 R.9.5 1bit 1bit (1) AVA( 3.) () AVD( 3.13) (3) CC( 3.).9. 19bit 19bit (1) AVA( 3.7) () AVD( 3.)

(3) CC( 3.1).9.7 5bit 5bit (1) AVA( 3.) () AVD( 3.15) (3) CC( 3.) 9

. SC B...1 (1) AVA( 3.) 1 () AVD( 3.9) (Hw=1) 7 (Hw=) (3) CC( 3.1) CC=1 # #1 #33 () UKV.. (1bit) (1) AVA( 3.3) (Hw=1) (Hw=1) (Hw=1) R R3 R () AVD( 3.) (Hw=1) (Hw=1) (Hw=1) R R3 R (3) CC( 3.17) (Hw=1) (Hw=1) (Hw=1) R R3 R..3 (19bit) (1) AVA( 3.) (Hw=1) (Hw=1) (Hw=1) R R3 R () AVD( 3.11) (Hw=1) (Hw=1) (Hw=1) R R3 R 5

(3) CC( 3.1) (Hw=1) (Hw=1) (Hw=1) R R3 R.. (5bit) (1) AVA( 3.5) (Hw=1) (Hw=1) (Hw=1) R R3 R () AVD( 3.1) (Hw=1) (Hw=1) (Hw=1) R R3 R (3) CC( 3.19) (Hw=1) (Hw=1) (Hw=1) R R3 R..5 (1bit) (1) AVA( 3.) () AVD( 3.13) (3) CC( 3.).. (19bit) (1) AVA( 3.7) () AVD( 3.) (3) CC( 3.1) CC=1 #1 ek[1]#3 ek[3]#31 51

..7 (5bit) (1) AVA( 3.) () AVD( 3.15) (3) CC( 3.) CC=1 # ek[1]#31 ek[3]#3 5

A [UNIE] CIPHERUNICORN-E,. [FEAL] FEAL-NX,. [HIL1] :Hierocrypt-L1,. [MIST] MISTY1,. [CAME] 1 Camellia,. [UNIA] CIPHERUNICORN-A,. [HI3] :Hierocrypt-3,. [MARS] MARS(AES ),. [RC] RC,. [SC] SC,. [WT5] A. F. Webster and S.E. Tavares, On the Design of S-boxes, CRYPTO 5, pp.53-53, Springer-Verlag, 195. [F] R. Forre, The Strict Avalanche Criterion: Spectral Properties of Boolean Functions and an Extended Definition, CRYPTO, LNCS3, pp.5-, Springer-Verlag, 199. [KS97] K. Kurosawa and T. Satoh, Design of SAC/PC(l) of Order k Boolean Functions and Three Other Cryptographic Criteria, EUROCRYPT 97, LNCS133, pp.3-9, Springer-Verlag, 1997. [TOM] Y. Tsunoo, R. Ohta, H. Miyauchi and K. Nakamura, A Cipher Strength Evaluation System using PC s Power, SCIS-A53, The Symposium on Cryptography and Information Security, The Institute of Electronics, Information and Communication Engineers,. A-1

B (1) () (A) AVA Att.bit ( ) Rel.bit (B) AVD Att.bit ( ) Rel.bit (3) B-1

() Rel. bit 1 1 1 3 1 1 1 3 1. A( ). A(3 ) B-

B B.1 CIPHERUNICORN-E Rel. bit 1 1 1 3 1 1 1 3 B.1.1 UNIE (Hw=1) AVA B.1-1

B.1 B.1 B.1 B.1- B.1. UNIE (Hw=1) AVA Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 1 1 1 3

Rel. bit 1 1 1 3 1 1 1 3 3 B.1.3 UNIE (Hw=1) AVD B.1-3

B.1 B.1 B.1 B.1- B.1. UNIE (Hw=1) AVD Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 1 1 1 3 3

Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 1 1 1 3 3 3 3 3 5 5 5 5 5 B.1.5 UNIE (Hw=1) R AVA B.1-5

Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 1 1 1 3 3 3 3 3 5 5 5 5 5 B.1. UNIE (Hw=1) R AVD B.1-

B.1 B.1 B.1 B.1-7 B.1.7 UNIE (Hw=1) AVA(1/) Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1

B.1 B.1 B.1 B.1- B.1. UNIE (Hw=1) AVA(/) Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 1 13 13 13 13 13 15 15 15 15 15 1 1 1 1 17 17 17 17 17 1 1 1 1 19 19 19 19 19 1 1 1 3 3 3 3 3 5 5 5 5bit 5bit

B B. FEAL-NX Rel. bit 1 1 1 3 1 1 1 3 B..1 FEAL (Hw=1) AVA Rel. bit 1 1 1 1 3 B.. FEAL (Hw=1) AVA B.-1

Rel. bit 1 1 1 3 1 1 1 3 3 B..3 FEAL (Hw=1) AVD Rel. bit 1 1 1 1 3 3 B.. FEAL (Hw=1) AVD B.-

Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 1 1 1 3 3 3 3 3 5 5 5 5 5 B..5 FEAL (Hw=1) R AVA B.-3

Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 1 1 1 3 3 3 3 3 5 5 5 5 5 B.. FEAL (Hw=1) R AVD B.-

B. B. B. B.-5 Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 B..7 FEAL (Hw=1) AVA(1/)

B. B. B. B.- Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 1 13 13 13 13 13 15 15 15 15 15 1 1 1 1 17 17 17 17 17 1 1 1 1 19 19 19 19 19 1 1 1 3 3 3 3 3 5 5 5 B.. FEAL (Hw=1) AVA(/) 5bit 5bit

B B.3 Hierocrypt-L1 1 1 1 3 3 3 3 3 5 5 5 5 5 Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 1/ B.3.1 HiL1 (Hw=1) AVA B.3-1

B.3 B.3 B.3 B.3- Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 1 1 1 3 3 3 3 3 5 5 5 5 5 B.3. HiL1 (Hw=1) AVA

Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 1 1 1 3 3 3 3 3 5 5 5 5 5 1/ B.3.3 HiL1 (Hw=1) AVD B.3-3

B.3 B.3 B.3 B.3- Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 1 1 1 3 3 3 3 3 5 5 5 5 5 B.3. HiL1 (Hw=1) AVD

Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 1 1 1 3 3 3 3 3 5 5 5 5 5 B.3.5 HiL1 (Hw=1) R AVA B.3-5

Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 1 1 1 3 3 3 3 3 5 5 5 5 5 B.3. HiL1 (Hw=1) R AVD B.3-

B.3 B.3 B.3 B.3-7 Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 B.3.7 HiL1 (Hw=1) AVA(1/)

B.3 B.3 B.3 B.3- Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 1 13 13 13 13 13 15 15 15 15 15 1 1 1 1 17 17 17 17 17 1 1 1 1 19 19 19 19 19 1 1 1 3 3 3 3 3 5 5 5 B.3. HiL1 (Hw=1) AVA(/) 5bit 5bit

B B. MISTY1 Rel. bit 1 1 1 3 1 1 1 3 B..1 MIST (Hw=1) AVA B.-1

B. B. B. B.- Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 1 1 1 3 B.. MIST (Hw=1) AVA

Rel. bit 1 1 1 3 1 1 1 3 3 B..3 MIST (Hw=1) AVD B.-3

B. B. B. B.- Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 1 1 1 3 3 B.. MIST (Hw=1) AVD

Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 1 1 1 3 3 3 3 3 5 5 5 5 5 B..5 MIST (Hw=1) R AVA B.-5

Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 1 1 1 3 3 3 3 3 5 5 5 5 5 B.. MIST (Hw=1) R AVD B.-

B. B. B. B.-7 Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 B..7 MIST (Hw=1) AVA(1/)

B. B. B. B.- Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 1 13 13 13 13 13 15 15 15 15 15 1 1 1 1 17 17 17 17 17 1 1 1 1 19 19 19 19 19 1 1 1 3 3 3 3 3 5 5 5 B.. MIST (Hw=1) AVA(/) 5bit 5bit

B B.5 Camellia 1 1 1 3 3 3 3 3 5 5 5 5 5 Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 B.5.1 Came (Hw=1) AVA B.5-1

B.5 B.5 B.5 B.5- Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 1 1 1 3 3 3 3 3 5 5 5 5 5 B.5. Came (Hw=1) AVA

B.5 B.5 B.5 B.5-3 B.5.3 Came (Hw=1) AVD Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 1 1 1 3 3 3 3 3 5 5 5 5 5

B.5 B.5 B.5 B.5- Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 1 1 1 3 3 3 3 3 5 5 5 5 5 B.5. Came (Hw=1) AVD

B.5 B.5 B.5 B.5-5 B.5.5 Came (1bit) (Hw=1) R AVA Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1

B.5 B.5 B.5 B.5- Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 1 B.5. Came (1bit) (Hw=1) R AVD

B.5 B.5 B.5 B.5-7 B.5.7 Came (1bit) (Hw=1) AVA(1/) Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1

B.5 B.5 B.5 B.5- Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 1 13 13 13 13 13 15 15 15 15 15 1 1 1 1 17 17 17 17 17 1 1 1 1 19 19 19 19 19 1 1 1 3 3 3 3 3 5 5 5 B.5. Came (1bit) (Hw=1) AVA(/) 5bit 5bit

B B. CIPHERUNICORN-A Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 1 1 1 3 3 3 3 3 5 5 5 5 5 B..1 UNIA (Hw=1) AVA B.-1

B. B. B. B.- Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 1 1 1 3 3 3 3 3 5 5 5 5 5 B.. UNIA (Hw=1) AVA

B. B. B. B.-3 Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 1 1 1 3 3 3 3 3 5 5 5 5 5 B..3 UNIA (Hw=1) AVD

B. B. B. B.- Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 1 1 1 3 3 3 3 3 5 5 5 5 5 B.. UNIA (Hw=1) AVD

B. B. B. B.-5 Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 B..5 UNIA (1bit) (Hw=1) R AVA

B. B. B. B.- Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 1 B.. UNIA (1bit) (Hw=1) R AVD

B. B. B. B.-7 Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 B..7 UNIA (1bit) (Hw=1) AVA(1/)

B. B. B. B.- Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 1 13 13 13 13 13 15 15 15 15 15 1 1 1 1 17 17 17 17 17 1 1 1 1 19 19 19 19 19 1 1 1 3 3 3 3 3 5 5 5 B.. UNIA (1bit) (Hw=1) AVA(/) 5bit 5bit

B.7 B.7 B.7 B.7-1 B B.7 B.7 B.7 B.7 Hierocrypt Hierocrypt Hierocrypt Hierocrypt-3 B.7.1 Hi3 (Hw=1) AVA Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 1/

B.7 B.7 B.7 B.7- B.7. Hi3 (Hw=1) AVA(1/) Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 1/

B.7 B.7 B.7 B.7-3 Rel. bit 1 13 13 13 13 13 15 15 15 15 15 1 1 1 1 17 17 17 17 17 1 1 1 1 19 19 19 19 19 1 1 1 3 3 3 3 3 5 5 5 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 B.7.3 Hi3 (Hw=1) AVA(/) 1/

B.7 B.7 B.7 B.7- Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 1 B.7. Hi3 (Hw=1) AVD 1/

B.7 B.7 B.7 B.7-5 Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 1 B.7.5 Hi3 (Hw=1) AVD(1/) 1/

B.7 B.7 B.7 B.7- Rel. bit 1 13 13 13 13 13 15 15 15 15 15 1 1 1 1 17 17 17 17 17 1 1 1 1 19 19 19 19 19 1 1 1 3 3 3 3 3 5 5 5 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 1 B.7. Hi3 (Hw=1) AVD(/) 1/

B.7 B.7 B.7 B.7-7 Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 B.7.7 Hi3 (1bit) (Hw=1) R AVA

B.7 B.7 B.7 B.7- Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 1 B.7. Hi3 (1bit) (Hw=1) R AVD

B.7 B.7 B.7 B.7-9 Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 B.7.9 Hi3 (1bit) (Hw=1) AVA(1/)

B.7 B.7 B.7 B.7- Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 1 13 13 13 13 13 15 15 15 15 15 1 1 1 1 17 17 17 17 17 1 1 1 1 19 19 19 19 19 1 1 1 3 3 3 3 3 5 5 5 B.7. Hi3 (1bit) (Hw=1) AVA(/) 5bit 5bit

B. B. B. B.-1 B B. B. B. B. MARS MARS MARS MARS B..1 MARS (Hw=1) AVA Rel. bit 1 1 1 3 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 B.. MARS (Hw=1) AVA

B. B. B. B.- Rel. bit 1 1 1 3 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 B..3 MARS (Hw=1) AVD Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 B.. MARS (Hw=1) AVD

B. B. B. B.-3 Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 B..5 MARS (1bit) (Hw=1) R AVA

B. B. B. B.- Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 1 B.. MARS (1bit) (Hw=1) R AVD

B. B. B. B.-5 Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 B..7 MARS (1bit) (Hw=1) AVA(1/)

B. B. B. B.- Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 1 13 13 13 13 13 15 15 15 15 15 1 1 1 1 17 17 17 17 17 1 1 1 1 19 19 19 19 19 1 1 1 3 3 3 3 3 5 5 5 B.. MARS (1bit) (Hw=1) AVA(/) 5bit 5bit

B B.9 RC 1 1 1 3 3 3 3 3 5 5 5 5 5 Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 B.9.1 RC (Hw=1) AVA B.9-1

B.9 B.9 B.9 B.9- Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 1 1 1 3 3 3 3 3 5 5 5 5 5 B.9. RC (Hw=1) AVA

B.9 B.9 B.9 B.9-3 Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 1 1 1 3 3 3 3 3 5 5 5 5 5 B.9.3 RC (Hw=1) AVD

B.9 B.9 B.9 B.9- B.9. RC (Hw=1) AVD Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 1 1 1 3 3 3 3 3 5 5 5 5 5

B.9 B.9 B.9 B.9-5 B.9.5 RC (1bit) (Hw=1) R AVA Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1

B.9 B.9 B.9 B.9- Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 1 B.9. RC (1bit) (Hw=1) R AVD

B.9 B.9 B.9 B.9-7 B.9.7 RC (1bit) (Hw=1) AVA(1/) Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1

B.9 B.9 B.9 B.9- Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 1 13 13 13 13 13 15 15 15 15 15 1 1 1 1 17 17 17 17 17 1 1 1 1 19 19 19 19 19 1 1 1 3 3 3 3 3 5 5 5 B.9. RC (1bit) (Hw=1) AVA(/) 5bit 5bit

B B. SC 1 1 1 3 3 3 3 3 5 5 5 5 5 Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 B..1 SC (Hw=1) AVA B.-1

B. B. B. B.- B.. SC (Hw=1) AVD Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 1 1 1 3 3 3 3 3 5 5 5 5 5

B. B. B. B.-3 B..3 SC (1bit) (Hw=1) R AVA Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1

B. B. B. B.- B.. SC (1bit) (Hw=1) R AVD Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 1

B. B. B. B.-5 Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 B..5 SC (1bit) (Hw=1) AVA(1/)

B. B. B. B.- Rel. bit 1 1 1 3 3 3 3 3 5 5 5 5 5 7 7 7 7 7 9 9 9 9 9 1 11 1 11 11 1 1 1 13 13 13 13 13 15 15 15 15 15 1 1 1 1 17 17 17 17 17 1 1 1 1 19 19 19 19 19 1 1 1 3 3 3 3 3 5 5 5 B.. SC (1bit) (Hw=1) AVA(/) 5bit 5bit

C C.1 CIPHERUNICORN-E (1) unsigned int F ( int r, unsigned int x ) r: (=) x: (3bit) EK.fk[r][]:3bit EK.fk[r][1]:3bit EK.sk[r][]:3bit EK.sk[r][1]:3bit (3bit) () void CipherUnicornEncode ( unsigned int *p, unsigned int *c ) p: (3bit ) void CipherUnicornScheduler(unsigned int *k) k: (3bit ) c: (3bit ) (3) void CipherUnicornScheduler ( unsigned int *k ) k: (3bit ) EK: (bit) C-1

C. FEAL-NX (1) void FEAL_F ( unsigned char *a, unsigned char *b, unsigned char *e ) b: ( ) e[]: e[1]: a: ( ) () void FEAL_encrypt ( unsigned char *p, unsigned int r, unsigned char *e, unsigned char *c ) p: (bit ) r: (=3) void FEAL_keygen(k, e, r) k: (bit 1) e: (bit ) c: (bit ) (3) void FEAL_keygen ( unsigned char *k, unsigned char *e, unsigned int r ) r: (=3) k: (bit 1) e: (bit ) C-

C.3 Hierocrypt-L1 (1) () (3) void hcryptl1_encrypt ( unsigned char *in, unsigned char *out, unsigned char *ks ) hcryptl1_xs() in: (bit ) n=1 ks: (bit 1) ks[][][] out: (bit ) void hcryptl1_encrypt ( unsigned char *in, unsigned char *out, unsigned char *ks ) in: (bit ) void hcryptl1_setkey(key, ks) key: (bit 1) ks: (bit 11) out: (bit ) void hcryptl1_setkey ( unsigned char *key, unsigned char *ks ) key: (bit 1) ks: (bit 11) C-3

C. MISTY1 (1) () void FO_txt ( unsigned short a, unsigned short a1, unsigned short a, unsigned short a3, int r ) r: (=) a, a1: ( 1bit) EXTKEY[][](1bit) EXTKEY[][5](9bit) EXTKEY[3][5](7bit) EXTKEY[][] (1bit) EXTKEY[][1] (9bit) EXTKEY[3][1] (7bit) EXTKEY[][7] (1bit) EXTKEY[][3] (9bit) EXTKEY[3][3] (7bit) EXTKEY[][] (1bit) a, a3: ( 1bit) void misty1 ( unsigned char *text, unsigned char *key, int block, int mode ) text: (bit ) block: (1 ) mode: / ( ) FI_key(k) key: (bit 1) text: (bit ) C-

(3) FI_key ( int k ) k: (=-7) key: (bit 1) EXTKEY[][],[1][]: (5bit) EXTKEY[][],[3][] EXTKEY[1][] C-5

C.5 Camellia (1) void Camellia_Feistel ( const unsigned char *x, const unsigned char *k, unsigned char *y ) x: (bit ) k: bit y: (bit ) () void Camellia_Encrypt ( const int n, const unsigned char *p, const unsigned char *e, unsigned char *c ) n: (1 or 19 or 5) p: (bit 1) void Camellia_Ekeygen(n, k, e ) n: (1 or 19 or 5) k: (bit 1 or or 3) e: (bit 7) c: (bit 1) (3) void Camellia_Ekeygen ( const int n, const unsigned char *k, unsigned char *e ) n: (1 or 19 or 5) k: (bit 1 or or 3) e: (bit 7) C-

C. CIPHERUNICORN RN-A (1) void F ( unsigned long ida, unsigned long idb, unsigned long *k, unsigned long *oda, unsigned long *odb ) ida, idb:( 3bit) k:(3bit ) oda, odb:( 3bit) () void Encode ( ulong *p, ulong *c ) p: (3bit ) void Sche(unsigned long *mk) mk: (3bit LINE) LINE= /3 c: (3bit ) (3) void Sche ( unsigned long *mk ) mk: (3bit LINE) LINE= /3 unsigned long IK[] unsigned long EK[1][] C-7

C.7 Hierocrypt-3 (1) void hcrypt_encrypt ( unsigned char *in, unsigned char *out, unsigned char *ks, int key_len ) hcrypt_xs() in: (bit 1) key_len: (key_len=-1: n=1 ) ks: (bit 3) ks[][][] out: (bit 1) () void hcrypt_encrypt ( unsigned char *in, unsigned char *out, unsigned char *ks, int key_len ) in: (bit 1) key_len: (1 or 19 or 5) void hcrypt_setkey(key, ks, key_len) key: (bit 1 or or 3) ks: (bit ) key_len: (1 or 19 or 5) out: (bit 1) (3) void hcrypt_setkey ( unsigned char *key, unsigned char *ks, int key_len ) key_len: (1 or 19 or 5) key: (bit 1 or or 3) ks: (bit ) C-

C. MARS (1) void E_func ( unsigned long Ida, unsigned long *ex1, unsigned long *ex, unsigned long *ex3, unsigned long *pkey ) Ida: (3bit) pkey: (3bit ) ex1, ex, ex3: (3bit 3) () void Encode ( unsigned long *Idata, unsigned long *Odata, unsigned long *ek ) Idata: (3bit ) void KeySchedule(length,skey,pkey) length: (1 or 19 or 5) skey: (3bit or or ) pkey: (3bit ) Odata: (3bit ) (3) void KeySchedule ( unsigned long length, unsigned long *skey, unsigned long *pkey ) length: (1 or 19 or 5) skey: (3bit or or ) pkey: (3bit ) C-9

C.9 RC (1) void RcEncryptBlock ( unsigned long *S, unsigned char *plaintext,, unsigned char *ciphertext ) pre-,post-whitening plaintext: (bit 1) []-[7],[1]-[15] []-[3],[]-[11] ROUNDS:1 define S[]: (3bit ) S[],S[3] ciphertext: (bit 1) []-[7],[1]-[15] () void RcEncryptBlock ( unsigned long *S, unsigned char *plaintext,, unsigned char *ciphertext ) plaintext: (bit 1) void RcComputeKeySchedule(key,KeyLengthInBytes,S) key: (bit 1 or or 3) KeyLengthInBytes: (1 or or 3) S: (3bit ) ciphertext: (bit 1) (3) void RcComputeKeySchedule ( unsigned char *key, int KeyLengthInBytes, unsigned long *S ) KeyLengthInBytes: (1 or or 3) key: (bit 1 or or 3) S: (3bit ) C-

C. SC (1) () void F_func ( unsigned long a, unsigned long b, unsigned long mask, unsigned long *c, unsigned long *d ) a,b: (3bit ) mask: (=x55555555) c,d: (3bit ) void encrypt ( unsigned long *out, unsigned long *in, unsigned long *ek, unsigned long keylength ) in: (3bit ) keylength: (1 or 19 or 5) void make_key(ekey, ukey, keylength) ekey: (ek: (3bit 5 or ) 1bit 5, 19 or 5bit ukey: (3bit or or ) keylength: (1 or 19 or 5) out: (3bit ) C-11

(3) void make_key ( unsigned long *ekey, unsigned long *ukey, unsigned long keylength ) keylength: (1 or 19 or 5) ukey: (3bit or or ) ek: (3bit 5 or ) 1bit 5, 19 or 5bit C-1