AES review

AES review

1.pre-requisition

1. mathematic

   1. XOR 可以理解成找到AB不同的点（求异）因此能理解 a XOR b XOR b = a (两种理解方式，1.a和b交集的补集再跟b交集的补集就是a 2.异或满足交换律，a xor (b xor b) = a xor 0 = a)

      eg. 以GF（2^8）为例 两个多项式进行加法运算（XOR或者模2相加）

      $(x^6+x^4+x^2+x+1)$$⨁$$(x^7+x+1)=$

      ​ 按照逻辑理解，可以直接得到：不同部分为$x^7+x^6+x^4+x^2$ (只有x+1是相同得，去掉)

   2. Polynomial Multiplication

      In the finite filed $GF(2^8)$ , 列混淆过程中的乘积大于$x^8$ 需要再mod $x^8+x^4+x^3+x+1（MAX（GF（2^8)=256=x^8）$

      1. for mod, a mod b = c , for another word $d·b+c=a $
      2. normally, a < b, a mod b = a. whereas when a > b, we do

   3. Matrix Inverse

   4. Matrix Multiplication

   5. Combination
      $$\left(\begin{array}{c}a\\ b\end{array}\right)=C_b^a=\frac{a!}{b!(a-b)!}$$

2.Algorithm

Input (AES 属于分组密码，symmetric encryption，同样也是) ,以aes 128为例，直接用实际例子计算

eg：00 11 22 33 44 55 66 77 88 99 0a 0b 0c 0d 0e 0f

分组之后的规律如下

00	44	88	0c
11	55	99	0d
22	66	00	0e
33	77	0b	0f

pre:

key-expandation

1. assuming the key is 2b7e151628aed2a6abf7158809cf4f3c

   Thus 分组密码即

   2B	28	AB	09
   7E	AE	F7	CF
   15	D2	15	4F
   16	A6	88	3C

   将每一列转换成一组，hence we have fout 32bits( 8 bytes (4 two hex))

   thus W0 = 2b7e1516，W1 = 28aed2a6, w2= abf71588,W3 = 09cf4f3c

   由于AES 128分组长度为128bit，并且共10轮，因此需要44个密钥，即扩展10轮

   1. 求出其他分组情况

      $$
      \begin{cases}

      W_j = W_(j-4) \bigoplus g(W_(j-1)),j/%4=0 \

      W_j = W_(j-4) \bigoplus W_(j-1),j%4!=0 \tag{1}

      \end{cases}
      $$
      能被4整除情况与通常情况

      hence

      $$\begin{gathered} W_4=W0⨁g_{(}W3) \\ {W}_3^{\prime }=W_{3}leftshiftonebytes=09cf4f3c\to cf4f3c09 \end{gathered}$$

      Thus

      $W_3^{\prime }=CF4F3C09$

      look-up table

      [外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-YxAvbfPX-1668572560860)(C:\Users\Merlinlee\Desktop\SBOX.png)]

      according to the table,$$\begin{gathered} cf\to 8a \\ 4f\to 84 \\ 3c\to eb \\ 09\to 01 \end{gathered}$$

      thus $W"=8a84eb01$

      这里引入轮常量 $R_{con}[i]=(RC[i],0,0,0)$，大小为4字节，仅第一字节有效（右边补三个0），之后与该轮密钥做xor，R[i]

      R[1]=1,RC[i]=2·RC[i-1] (算了吧，凡人，你理解不了数论的，用数学家的结果就可以了)

      [外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-V3HyYyzL-1668572560861)(https://1.bp.blogspot.com/-DTu3DnVo66M/YNG-8LxCJXI/AAAAAAAACgc/xlxBP00UDlsS0T-LGAkZ2hkZSme-eXfsQCPcBGAYYCw/s835/Key%2BExp%2BFig%2B2.png)]

      from https://www.chiragbhalodia.com/2021/10/key-expansion-in-AES.html

      here we get $$\begin{gathered} R_{con[1]}=01000000R_{con[2]}=02000000R_{con[3]}=04000000R_{con[4]}=08000000R_{con[5]}=10000000 \\ {R}_{con[6]}=2000000R_{con[7]}=40000000R_{con[8]}=80000000R_{con[9]}=1B000000R_{con[10]}=36000000 \end{gathered}$$

      from finite domain GF2^1 to GF2^9
      $$
      g（n） =
      \begin{cases}
      W3’’ \ \ \ \ \ 1000 \ |1010|1000|0100|1110|1011|0000|0001|\
      R_{con}[0]0000 \ |0001|0000|0000|0000|0000|0000|0000| \
      W_3’‘’= |1000|1011||1000|0100|1110|1011|0000|0001|=8b84eb01

      \end{cases}
      $$
      如上，得到$g(W_3{’}^{\prime })=W_3^{\prime \prime \prime }=8b84eb01$, by the way n = J = 0,(每轮的Rcon都不同)

      G(2^8)乘法：

      先进行多项式相乘，然后再将结果模不可约多项式$m(x)=X^8+x^4+x^3+x+1$

      next we get W4 = W0 $⨁W^{\prime \prime \prime }$ = A0FA FE17

      [外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-fbAto6my-1668572560862)(C:\Users\Merlinlee\AppData\Roaming\Typora\typora-user-images\image-20221114083425774.png)]

      as the (1)

      now we have W5 = W1$⨁$W4= 8854 2CB1,W6=23A33939,W7=2A6C7605

      so the second set
      KaTeX parse error: Undefined control sequence: \matrix at position 9: \left[ \̲m̲a̲t̲r̲i̲x̲{ A0 & 88 & 23 …

      Following the same step as below,10 turns keys

   Encryptions

   1. AddRoundKey

      simply just xor plaintext and cipher，here we take “32 43 f6 a8 88 5a 30 8d 31 31 98 a2 e0 37 07 34’’”
      KaTeX parse error: Undefined control sequence: \matrix at position 15: \left[ \̲m̲a̲t̲r̲i̲x̲{ 32 & 88…

   2. Subbytes

      mapping matrix (2) to S-box, then we have the subbytes matrix

      (note that the row to first byte, eg 19 => D4)

      thus we have
      KaTeX parse error: Undefined control sequence: \matrix at position 9: \left[ \̲m̲a̲t̲r̲i̲x̲{ D4 & e0 & b8 …

   3. ShiftRows

      First row stay

      second row left shift one byte

      third row left shift two bytes

      The fourth row left shifts three bytes

      as to our matrix
      KaTeX parse error: Undefined control sequence: \matrix at position 9: \left[ \̲m̲a̲t̲r̲i̲x̲{ D4 & e0 & b8 …

   4. MixColumn

      左乘一个固定矩阵
      KaTeX parse error: Undefined control sequence: \matrix at position 9: \left[ \̲m̲a̲t̲r̲i̲x̲{ 02 & 03 & 01 …
      [外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-1EtWkqJZ-1668572560862)(C:\Users\Merlinlee\AppData\Roaming\Typora\typora-user-images\image-20221114111657210.png)]
      $$\begin{gathered} S_{0,j}^{\prime }=02\times S_{0,j}^{\prime }⨁03\times S_{1,j}^{\prime }⨁01\times S_{2,j}^{\prime }⨁01\times S_{3,j}^{\prime } \\ {S}_{0,j}^{\prime }=01\times S_{0,j}^{\prime }⨁02\times S_{1,j}^{\prime }⨁03\times S_{2,j}^{\prime }⨁01\times S_{3,j}^{\prime } \\ {S}_{0,j}^{\prime }=01\times S_{0,j}^{\prime }⨁01\times S_{1,j}^{\prime }⨁02\times S_{2,j}^{\prime }⨁03\times S_{3,j}^{\prime } \\ {S}_{0,j}^{\prime }=03\times S_{0,j}^{\prime }⨁01\times S_{1,j}^{\prime }⨁01\times S_{2,j}^{\prime }⨁02\times S_{3,j}^{\prime } \end{gathered}$$

      1. GF2^8乘法：

         1. 满足乘法分配律，即03 x S = 01 x S $⨁$ 02 x S

         2. x01类似普通乘法

         3. x02表示左移一位，右边补0，

            if 最高为1，讲以为结果和0x1B xor

            else 保留

         S 0 , 0 ′ = D 4 × 02 ⨁ 27 × 03 ⨁ 11 × 01 ⨁ a e × 01 = 11010100 → { 10101000 ⨁ 00011011 = 1011   001 1 = b 3 } ⨁ { b f ⨁ ( 1011   1111 → { 0111   1110 ⨁ 0001   1011 = 0110   010 1 = 65 ) ⨁ 5 d ⨁ 30 = b 3 ⨁ b f ⨁ 65 ⨁ 5 d ⨁ 30 = 04 S'_{0,0}=D4 \times 02 \bigoplus 27\times03\bigoplus11\times01\bigoplus ae\times01=1101 0100 \rightarrow \{10101000 \bigoplus 00011011\\=1011 \ 0011_{=b3}\}\bigoplus\{bf \bigoplus(1011\ 1111\rightarrow \{0111\ 1110 \bigoplus 0001\ 1011 =0110\ 0101_{=65})\\\bigoplus 5d \bigoplus 30 = b3 \bigoplus bf \bigoplus 65 \bigoplus 5d \bigoplus 30 =04 S0,0′​=D4×02⨁27×03⨁11×01⨁ae×01=11010100→{10101000⨁00011011=1011 0011=b3​}⨁{bf⨁(1011 1111→{0111 1110⨁0001 1011=0110 0101=65​)⨁5d⨁30=b3⨁bf⨁65⨁5d⨁30=04

         [外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-X4TXnBnO-1668572560863)(C:\Users\Merlinlee\AppData\Roaming\Typora\typora-user-images\image-20221114151417764.png)]

      之后重复上述步骤即可完成明文加密，

   LLY by Nov.14.2022

01\ 1011 =0110\ 0101_{=65})\\bigoplus 5d \bigoplus 30 = b3 \bigoplus bf \bigoplus 65 \bigoplus 5d \bigoplus 30 =04
$$

     [外链图片转存中...(img-X4TXnBnO-1668572560863)]

  之后重复上述步骤即可完成明文加密，

LLY by Nov.14.2022