Cryptanalytic concept of~finite~automaton invertibility with finite delay

G. P. Agibalov

Prikladnaâ diskretnaâ matematika, no. 2 (2019), pp. 34-42.

Résumé

The automaton invertibility with a finite delay plays a very important role in the analysis and synthesis of finite automata cryptographic systems. The automaton cryptanalitic invertibility with a finite delay $\tau$ is studied in the paper. From the cryptanalyst's point of view, this notion means the theoretical possibility for recovering, under some conditions, a prefix $\alpha$ of a length $n$ in an unknown input sequence $\alpha\delta$ of an automaton from its output sequence $\gamma$ of the length $n+\tau$ and perhaps an additional information such as parameters $\tau$ and $n$, initial ($q$), intermediate ($\theta$) or final ($t$) state of the automaton or the suffix $\delta$ of the length $\tau$ in the input sequence. The conditions imposed on the recovering algorithm require for prefix $\alpha$ to be arbitrary and may require for the initial state $q$ and suffix $\delta$ to be arbitrary or existent, that is, the variable $\alpha$ is always bound by the universal quantifier and each of variables $q$ and $\delta$ may be bound by any of quantifiers — universal ($\forall$) or existential ($\exists$) one. The variety of information, which can be known to a cryptanalyst, provides many different types of the automaton invertibility and, respectively, many different classes of invertible automata. Thus, in the paper, an invertibility with a finite delay $\tau$ of a finite automaton $A$ is the ability of this automaton to resist recovering or, on the contrary, to allow precise determining any input word $\alpha$ of a length $n$ for the output word $\gamma$ being the result of transforming by the automaton $A$ in its initial state $q$ the input word $\alpha\delta$ with the $\delta$ of length $\tau$ and with the known $n, \tau, A, \gamma$ and $\upsilon\subseteq \{\delta, q, \theta, t\}$ where $q$ and $\delta$ may be arbitrary or some elements in their sets and $\theta $ and $t$ are respectively intermediate and final states of $A$ into which $A$ comes from $q$ under acting of input words $\alpha$ and $\alpha\delta$ respectively. According to this, the automaton $A$ is called invertible with a delay $\tau$ if there exists a function $f(\gamma, \upsilon)$ and a triplet of quantifiers $\varkappa\in\{Q_1x_1Q_2x_2Q_3x_3: Q_ix_i \in\{\forall q, \exists q, \forall\alpha, \forall\delta, \exists\delta\}, i \neq j \Rightarrow x_i \neq x_j\}$ such that $\varkappa[f(\gamma, \upsilon)= \alpha]$; in this case $f$ is called a recovering function, $(\varkappa, \upsilon)$ — an invertibility type, $\varkappa$ — an invertibility degree, $\upsilon$ — an invertibility order of the automaton $A$ and $\exists f \varkappa[f(\gamma, \upsilon)= \alpha]$ — an invertibility condition of type $(\varkappa, \upsilon)$ for the automaton $A$. So, 208 different types of the automaton $A$ invertibility are defined at all. The well known types of (strong) invertibility and weak invertibility described for finite automata earlier by scientists (D. A. Huffman, A. Gill, Sh. Even, A. A. Kurmit, Z. D. Dai, D. F. Ye, K. Y. Lam, R. Tao and many others) in our theory belong to types $(\forall q\forall\alpha\forall\delta, \emptyset)$ and $(\forall q\forall\alpha\forall\delta, \{q\})$ respectively. For every invertibility type, we have defined a class of automata with this type of invertibility and described the inclusion relation on the set of all these classes. It has turned out that the graph of this relation is the union of twenty nine lattices with thirteen of them each containing sixteen classes and sixteen lattices each containing thirteen classes. To solve the scientific problems (invertability tests, synthesis of inverse automata and so on) related to the different and concrete invertibility classes, we hope to continue these investigations.

Détail

Keywords: finite automata, information-lossless automata, automata invertibility, cryptanalytic invertibility.

Bibliographie

[1] Huffman D. A., “Canonical forms for information-lossless finite-state logical machines”, IRE Trans. Circuit Theory, 6, Spec. Suppl. (1959), 41–59 | DOI | MR | Zbl

[2] Huffman D. A., “Notes on information-lossless finite-state automata”, Nuovo Cimento, 13, Suppl. 2 (1959), 397–405 | DOI | MR | Zbl

[3] Gill A., Introduction to the Theory of Finite-State Machines, McGraw-Hill Book Company, N.Y., 1962, 300 pp. | MR

[4] Even Sh., “On information-lossless automata of finite order.”, IEEE Trans. Electron. Comput., 14:4 (1965), 561–569 | DOI | MR | Zbl

[5] Kurmit A. A., Information Lossless Automata of Finite Order, John Wiley Publ., N.Y., 1974 | MR | Zbl

[6] Zakrevskiy A. D., “The method for messages automatic encryption”, Prikladnaya Diskretnaya Matematika, 2009, no. 2(4), 127–137 (in Russian) | DOI

[7] Agibalov G. P., “Finite automata in cryptography”, Prikladnaya Diskretnaya Matematika. Prilojenie, 2009, no. 2, 43–73 (in Russian)

[8] Dai Z. D., Ye D. F., Lam K. Y., “Weak invertibility of finite automata and cryptanalysis on FAPKC”, LNCS, 1514, 1998, 227–241 | MR | Zbl

[9] Tao R., Finite Automata and Application to Cryptography, Springer, N.Y., 2009, 406 pp. | MR