Structural Attack (and Repair) of Diffused-Input-Blocked-Output White-Box Cryptography

In some practical enciphering frameworks, operational constraints may require that a secret key be embedded into the cryptographic algorithm. Such implementations are referred to as White-Box Cryptography (WBC). One technique consists of the algorithm’s tabulation specialized for its key, followed by obfuscating the resulting tables. The obfuscation consists of the application of invertible diffusion and confusion layers at the interface between tables so that the analysis of input/output does not provide exploitable information about the concealed key material.Several such protections have been proposed in the past and already cryptanalyzed thanks to a complete WBC scheme analysis. In this article, we study a particular pattern for local protection (which can be leveraged for robust WBC); we formalize it as DIBO (for Diffused-Input-Blocked-Output). This notion has been explored (albeit without having been nicknamed DIBO) in previous works. However, we notice that guidelines to adequately select the invertible diffusion ∅and the blocked bijections B were missing. Therefore, all choices for ∅ and B were assumed as suitable. Actually, we show that most configurations can be attacked, and we even give mathematical proof for the attack. The cryptanalysis tool is the number of zeros in a Walsh-Hadamard spectrum. This “spectral distinguisher” improves on top of the previously known one (Sasdrich, Moradi, Güneysu, at FSE 2016). However, we show that such an attack does not work always (even if it works most of the time).Therefore, on the defense side, we give a straightforward rationale for the WBC implementations to be secure against such spectral attacks: the random diffusion part ∅ shall be selected such that the rank of each restriction to bytes is full. In AES’s case, this seldom happens if ∅ is selected at random as a linear bijection of F322. Thus, specific care shall be taken. Notice that the entropy of the resulting ∅ (suitable for WBC against spectral attacks) is still sufficient to design acceptable WBC schemes.

C∗-algebra consisting of all g-Bessel sequences in a Hilbert space

For Hilbert spaces [Formula: see text] and [Formula: see text], we use the notations [Formula: see text], [Formula: see text] and [Formula: see text] to denote the sets of all [Formula: see text]-Bessel sequences, [Formula: see text]-frames and Riesz bases in [Formula: see text] with respect to [Formula: see text], respectively. By defining a linear operation and a norm, we prove that [Formula: see text] becomes a Banach space and is isometrically isomorphic to the operator space [Formula: see text], where [Formula: see text]. In light of operator theory, it is proved that [Formula: see text] and [Formula: see text] are open sets in [Formula: see text]. This implies that both [Formula: see text]-frames and Riesz bases are stable under a small perturbation. By introducing a linear bijection [Formula: see text] from [Formula: see text] onto the [Formula: see text]-algebra [Formula: see text], a multiplication and an involution on the Banach space [Formula: see text] are defined so that [Formula: see text] becomes a unital [Formula: see text]-algebra that is isometrically isomorphic to the [Formula: see text]-algebra [Formula: see text], provided that [Formula: see text] and [Formula: see text] are isomorphic.

How Lipschitz Functions Characterize the Underlying Metric Spaces

Let X and Y be metric spaces and E, F be Banach spaces. Suppose that both X and Y are realcompact, or both E, F are realcompact. The zero set of a vector-valued function ƒ is denoted by z(ƒ). A linear bijection T between local or generalized Lipschitz vector-valued function spaces is said to preserve zero-set containments or nonvanishing functions ifrespectively. Every zero-set containment preserver, and every nonvanishing function preserver when dim E = dim F <+∞, is a weighted composition operator . We show that the map τ : Y → X is a locally (little) Lipschitz homeomorphism.

Invertibility-preserving maps ofC∗-algebras with real rank zero

In 1996, Harris and Kadison posed the following problem: show that a linear bijection betweenC∗-algebras that preserves the identity and the set of invertible elements is a Jordan isomorphism. In this paper, we show that ifAandBare semisimple Banach algebras andΦ:A→Bis a linear map ontoBthat preserves the spectrum of elements, thenΦis a Jordan isomorphism if eitherAorBis aC∗-algebra of real rank zero. We also generalize a theorem of Russo.

Biseparating linear maps between continuous vector-valued function spaces

Let X, Y be compact Hausdorff spaces and E, F be Banach spaces. A linear map T: C(X, E) → C(Y, F) is separating if Tf, Tg have disjoint cozeroes whenever f, g have disjoint cozeroes. We prove that a biseparating linear bijection T (that is, T and T-1 are separating) is a weighted composition operator Tf = h · f o ϕ. Here, h is a function from Y into the set of invertible linear operators from E onto F, and ϕ, is a homeomorphism from Y onto X. We also show that T is bounded if and only if h(y) is a bounded operator from E onto F for all y in Y. In this case, h is continuous with respect to the strong operator topology.

On the Linear Invariance of Lindelöf Numbers

Let X and Y be Tychonov spaces and suppose there exists a continuous linear bijection from Cp(X)to CP(Y). In this paper we develop a method that enables us to compare the Lindelöf number of Y with the Lindelöf number of some dense subset Z of X. As a corollary we get that if for perfect spaces X and Y, CP(X) and Cp(Y)are linearly homeomorphic, then the Lindelöf numbers of Jf and Fare equal. Another result in this paper is the following. Let X and Y be any two linearly ordered perfect Tychonov spaces such that Cp(X)and Cp(Y)are linearly homeomorphic. Let be a topological property that is closed hereditary, closed under taking countable unions and closed under taking continuous images. Then X has isproperty if and only if Y has. As examples of such properties we consider certain cardinal functions.

On Isomorphisms of Lattices of Closed Subspaces

By a projectivityof vector spaces Xand Yover fields F and G is meant an isomorphism Ψ:(X) → (Y) of their lattices of subspaces. A basic theorem of projective geomtry [2, p. 44] asserts that, for spaces of dimension at least 3, any such projectivity is of the form Ψ(M) = SM for a bijection S:X → Y which is semi-linear in the sense that S is an additive mapping for which there exists an isomorphism σ:F→ G such thatS(λx) = σ(λ)Sx for all λ ∈ Fand all x∈ X.In [12] Mackey obtained a continuous version of this result: for real normed linear spaces Xand Y, the lattices and of closed subspaces are isomorphic if and only if X and Yare isomorphic (i.e., via a bicontinuous linear bijection).

Transformations of n-Space which Preserve a Fixed Square-Distance

1. Introduction. Our interest here lies in the following theorem:THEOREM 1. Assume there is defined on Rn (n ≧ 3) a “square-distance” of the formwhere (gij) is a given symmetric non-singular matrix over the reals and x = (x1, …, xn), y = (y1, …, yn) ∈ Rn. Assume further that f is a bijection ofRnwhich preserves a given fixed square-distance ρ, i.e. d(x, y) = ρ if and only if d(ƒ(x),ƒ(y)) = ρ. Then (unless ρ = 0 and (gij) is positive or negative definite) ƒ(x) = Lx + ƒ(0), where L is a linear bijection ofRnsatisfying d(Lx, Ly) = ±d(x, y) for all x, y ∈ Rn (the – sign is possible if and only if ρ = 0 and (gij) has signature 0).

Isomorphisms in Subspaces of c0

A Banach space X is said to be subspace homogeneous if for every two isomorphic closed subspaces Y and Z of X, both of infinite codimension, there is an automorphism of X (i.e. a bounded linear bijection of X) which carries Y onto Z. In [1] Lindenstrauss and Rosenthal showed that c0 is subspace homogeneous, a property also shared by l2, and conjectured that c0 and l2 are the only subspace homogeneous Banach spaces. In that paper no mention was made of subspaces of c0.