Remember that it is desirable for good block ciphers that a change in one input
ID: 3828470 • Letter: R
Question
Remember that it is desirable for good block ciphers that a change in one input bit affects many output bits, a property that is called diffusion or the avalanche effect. We try not get a feeling for the avalanche property of DES. We apply an input word that has a "1" at bit position 57 and all over bits as well as the key are zero. (Note that the input word has to run through the initial permutation.) How many S-boxes get different inputs compared to the case when an all-zero plaintext is provided? What is the minimum number of output bits of the S-boxes that will change according to the S_box design criteria? What is the output after the first round? How many output bit after the first round have actually changed compared to the case when the plaintext is all zero? (Observe that we only consider a single round here. There will be more and more output differences after every new round. Hence the term avalanche effect.)Explanation / Answer
Initial Permutation IP(x) maps bit 57 to position 33, which is position 1 in R0.
E-Expansion box maps bit position 1 to positions 2 and 48.
Input to S-boxes:
S1 : 0 1 0 0 0 0
S2 : 0 0 0 0 0 0
S3 : 0 0 0 0 0 0
S4 : 0 0 0 0 0 0
S5 : 0 0 0 0 0 0
S6 : 0 0 0 0 0 0
S7 : 0 0 0 0 0 0
Here S2=S3=S4=S5=S6=S7
Now two S-Boxes get a different input.
P(S) = D058 5B9E
(L1 , R1) = 8000 0000 D058 5B9E
Answers :
1.
Two S-Boxes S1 and S8
2.
According to the design criteria , a minimum of 2 bits /bit are required.
i.e 2*2 = 4 bits are required.
3.
S1 and S8 are changed , remaining all are S2=S3=S4=S5=S6=S7 are same.
4.
6 bits are changed . They are 3 from S1 and 2 from S8 an 1 in the left half.