祖沖之算法集（ZUC算法）是由我國學者自主設計的加密和完整性算法，包括祖沖之算法、加密算法128-EEA3和完整性算法128-EIA3，已經被國際組織3GPP推薦為4G無線通信的第三套國際加密和完整性標準的候選算法。由中國科學院信息工程研究所信息安全國家重點實驗室和中國科學院數據與通信保護研究教育中心（DCS中心）聯合主辦的《第一屆祖沖之算法國際研討會》將於2010年12月2至3在北京召開。本次國際研討會對於加強祖沖之算法研究分析成果的國內和國際交流，擴大祖沖之算法的公開平評估範圍，加強祖沖之算法的安全性評估力度，進而推進祖沖之算法4G通信國際加密標準的進度具有重要的現實意義。
基本介紹
- 中文名：祖沖之算法集
- 外文名：ZUC
- 類別：流加密算法
- 研發人：馮登國、林東岱、馮秀濤、周春芳
算法介紹,算法實現,
算法介紹
祖沖之算法集（ZUC算法）是由我國學者自主設計的加密和完整性算法，包括祖沖之算法、加密算法128-EEA3和完整性算法128-EIA3，已經被國際組織3GPP推薦為4G無線通信的第三套國際加密和完整性標準的侯選算法。由中國科學院信息工程研究所信息安全國家重點實驗室和中國科學院數據與通信保護研究教育中心（DCS中心）聯合主辦的《第一屆祖沖之算法國際研討會》將於2010年12月2至3在北京召開。本次國際研討會對於加強祖沖之算法研究分析成果的國內和國際交流，擴大祖沖之算法的公開平評估範圍，加強祖沖之算法的安全性評估力度，進而推進祖沖之算法4G通信國際加密標準的進度具有重要的現實意義。
據了解，在日本福岡召開的第53次3GPP系統架構組會議上，我國祖沖之密碼算法（ZUC）被批准成為新一代寬頻無線移動通信系統（LTE）國際標準。祖沖之密碼算法的名字源於我國古代數學家祖沖之，祖沖之算法集是由我國學者自主設計的加密和完整性算法，是一種流密碼。它是兩個新的LTE算法的核心，這兩個LTE算法分別是加密算法128-EEA3和完整性算法128-EIA3。ZUC算法由3個基本部分組成，依次為:1、比特重組；2、非線性函式F；3、線性反饋移位暫存器(LFSR)。
相關人士認為ZUC成為國際標準提高了我國在移動通信領域的地位和影響力，對我國移動通信產業和商用密碼產業發展均具有重大而深遠的意義。
據悉，祖沖之密碼算法是我國商用密碼算法首次走出國門，參與國際標準競爭，擴大了祖沖之算法的公開平評估範圍。
算法實現
python實現
以下為開源項目snowland-smx-python的zuc實現
#!/usr/bin/env python# -*- coding: utf-8 -*-# @Author : 河北雪域網路科技有限公司 A.Star# @contact: [email protected]# @site: www.snowland.ltd# @file: ZUC.py# @time: 2018/10/20 17:23# @Software: PyCharmfrom math import ceilS0 = [ 0x3E, 0x72, 0x5B, 0x47, 0xCA, 0xE0, 0x00, 0x33, 0x04, 0xD1, 0x54, 0x98, 0x09, 0xB9, 0x6D, 0xCB, 0x7B, 0x1B, 0xF9, 0x32, 0xAF, 0x9D, 0x6A, 0xA5, 0xB8, 0x2D, 0xFC, 0x1D, 0x08, 0x53, 0x03, 0x90, 0x4D, 0x4E, 0x84, 0x99, 0xE4, 0xCE, 0xD9, 0x91, 0xDD, 0xB6, 0x85, 0x48, 0x8B, 0x29, 0x6E, 0xAC, 0xCD, 0xC1, 0xF8, 0x1E, 0x73, 0x43, 0x69, 0xC6, 0xB5, 0xBD, 0xFD, 0x39, 0x63, 0x20, 0xD4, 0x38, 0x76, 0x7D, 0xB2, 0xA7, 0xCF, 0xED, 0x57, 0xC5, 0xF3, 0x2C, 0xBB, 0x14, 0x21, 0x06, 0x55, 0x9B, 0xE3, 0xEF, 0x5E, 0x31, 0x4F, 0x7F, 0x5A, 0xA4, 0x0D, 0x82, 0x51, 0x49, 0x5F, 0xBA, 0x58, 0x1C, 0x4A, 0x16, 0xD5, 0x17, 0xA8, 0x92, 0x24, 0x1F, 0x8C, 0xFF, 0xD8, 0xAE, 0x2E, 0x01, 0xD3, 0xAD, 0x3B, 0x4B, 0xDA, 0x46, 0xEB, 0xC9, 0xDE, 0x9A, 0x8F, 0x87, 0xD7, 0x3A, 0x80, 0x6F, 0x2F, 0xC8, 0xB1, 0xB4, 0x37, 0xF7, 0x0A, 0x22, 0x13, 0x28, 0x7C, 0xCC, 0x3C, 0x89, 0xC7, 0xC3, 0x96, 0x56, 0x07, 0xBF, 0x7E, 0xF0, 0x0B, 0x2B, 0x97, 0x52, 0x35, 0x41, 0x79, 0x61, 0xA6, 0x4C, 0x10, 0xFE, 0xBC, 0x26, 0x95, 0x88, 0x8A, 0xB0, 0xA3, 0xFB, 0xC0, 0x18, 0x94, 0xF2, 0xE1, 0xE5, 0xE9, 0x5D, 0xD0, 0xDC, 0x11, 0x66, 0x64, 0x5C, 0xEC, 0x59, 0x42, 0x75, 0x12, 0xF5, 0x74, 0x9C, 0xAA, 0x23, 0x0E, 0x86, 0xAB, 0xBE, 0x2A, 0x02, 0xE7, 0x67, 0xE6, 0x44, 0xA2, 0x6C, 0xC2, 0x93, 0x9F, 0xF1, 0xF6, 0xFA, 0x36, 0xD2, 0x50, 0x68, 0x9E, 0x62, 0x71, 0x15, 0x3D, 0xD6, 0x40, 0xC4, 0xE2, 0x0F, 0x8E, 0x83, 0x77, 0x6B, 0x25, 0x05, 0x3F, 0x0C, 0x30, 0xEA, 0x70, 0xB7, 0xA1, 0xE8, 0xA9, 0x65, 0x8D, 0x27, 0x1A, 0xDB, 0x81, 0xB3, 0xA0, 0xF4, 0x45, 0x7A, 0x19, 0xDF, 0xEE, 0x78, 0x34, 0x60]S1 = [ 0x55, 0xC2, 0x63, 0x71, 0x3B, 0xC8, 0x47, 0x86, 0x9F, 0x3C, 0xDA, 0x5B, 0x29, 0xAA, 0xFD, 0x77, 0x8C, 0xC5, 0x94, 0x0C, 0xA6, 0x1A, 0x13, 0x00, 0xE3, 0xA8, 0x16, 0x72, 0x40, 0xF9, 0xF8, 0x42, 0x44, 0x26, 0x68, 0x96, 0x81, 0xD9, 0x45, 0x3E, 0x10, 0x76, 0xC6, 0xA7, 0x8B, 0x39, 0x43, 0xE1, 0x3A, 0xB5, 0x56, 0x2A, 0xC0, 0x6D, 0xB3, 0x05, 0x22, 0x66, 0xBF, 0xDC, 0x0B, 0xFA, 0x62, 0x48, 0xDD, 0x20, 0x11, 0x06, 0x36, 0xC9, 0xC1, 0xCF, 0xF6, 0x27, 0x52, 0xBB, 0x69, 0xF5, 0xD4, 0x87, 0x7F, 0x84, 0x4C, 0xD2, 0x9C, 0x57, 0xA4, 0xBC, 0x4F, 0x9A, 0xDF, 0xFE, 0xD6, 0x8D, 0x7A, 0xEB, 0x2B, 0x53, 0xD8, 0x5C, 0xA1, 0x14, 0x17, 0xFB, 0x23, 0xD5, 0x7D, 0x30, 0x67, 0x73, 0x08, 0x09, 0xEE, 0xB7, 0x70, 0x3F, 0x61, 0xB2, 0x19, 0x8E, 0x4E, 0xE5, 0x4B, 0x93, 0x8F, 0x5D, 0xDB, 0xA9, 0xAD, 0xF1, 0xAE, 0x2E, 0xCB, 0x0D, 0xFC, 0xF4, 0x2D, 0x46, 0x6E, 0x1D, 0x97, 0xE8, 0xD1, 0xE9, 0x4D, 0x37, 0xA5, 0x75, 0x5E, 0x83, 0x9E, 0xAB, 0x82, 0x9D, 0xB9, 0x1C, 0xE0, 0xCD, 0x49, 0x89, 0x01, 0xB6, 0xBD, 0x58, 0x24, 0xA2, 0x5F, 0x38, 0x78, 0x99, 0x15, 0x90, 0x50, 0xB8, 0x95, 0xE4, 0xD0, 0x91, 0xC7, 0xCE, 0xED, 0x0F, 0xB4, 0x6F, 0xA0, 0xCC, 0xF0, 0x02, 0x4A, 0x79, 0xC3, 0xDE, 0xA3, 0xEF, 0xEA, 0x51, 0xE6, 0x6B, 0x18, 0xEC, 0x1B, 0x2C, 0x80, 0xF7, 0x74, 0xE7, 0xFF, 0x21, 0x5A, 0x6A, 0x54, 0x1E, 0x41, 0x31, 0x92, 0x35, 0xC4, 0x33, 0x07, 0x0A, 0xBA, 0x7E, 0x0E, 0x34, 0x88, 0xB1, 0x98, 0x7C, 0xF3, 0x3D, 0x60, 0x6C, 0x7B, 0xCA, 0xD3, 0x1F, 0x32, 0x65, 0x04, 0x28, 0x64, 0xBE, 0x85, 0x9B, 0x2F, 0x59, 0x8A, 0xD7, 0xB0, 0x25, 0xAC, 0xAF, 0x12, 0x03, 0xE2, 0xF2]D = [ 0x44D7, 0x26BC, 0x626B, 0x135E, 0x5789, 0x35E2, 0x7135, 0x09AF, 0x4D78, 0x2F13, 0x6BC4, 0x1AF1, 0x5E26, 0x3C4D, 0x789A, 0x47AC]def addition_uint31(a, b): c = a + b return (c & 0x7FFFFFFF) + (c >> 31)def rotl_uint31(a, shift): return ((a << shift) | (a >> (31 - shift))) & 0x7FFFFFFFdef rotl_uint32(a, shift): return ((a << shift) | (a >> (32 - shift))) & 0xFFFFFFFFdef l1(x): return (x ^ rotl_uint32(x, 2) ^ rotl_uint32(x, 10) ^ rotl_uint32(x, 18) ^ rotl_uint32(x, 24))def l2(x): return (x ^ rotl_uint32(x, 8) ^ rotl_uint32(x, 14) ^ rotl_uint32(x, 22) ^ rotl_uint32(x, 30))def make_uint32(a, b, c, d): return ((a << 24) & 0xffffffff) | ((b << 16) & 0xffffffff) | ((c << 8) & 0xffffffff) | ddef make_uint31(a, b, c): return ((a << 23) & 0x7fffffff) | ((b << 8) & 0x7fffffff) | cclass ZUC(object): def __init__(self, key, iv): self.r = [0, 0] self.lfsr = [0 for _ in range(16)] self.x = [0, 0, 0, 0] self.zuc_init(key, iv) def bit_reorganization(self): self.x[0] = ((self.lfsr[15] & 0x7FFF8000) << 1) | (self.lfsr[14] & 0xFFFF) self.x[1] = ((self.lfsr[11] & 0xFFFF) << 16) | (self.lfsr[9] >> 15) self.x[2] = ((self.lfsr[7] & 0xFFFF) << 16) | (self.lfsr[5] >> 15) self.x[3] = ((self.lfsr[2] & 0xFFFF) << 16) | (self.lfsr[0] >> 15) def lfsr_next(self): f = self.lfsr[0] v = rotl_uint31(self.lfsr[0], 8) f = addition_uint31(f, v) v = rotl_uint31(self.lfsr[4], 20) f = addition_uint31(f, v) v = rotl_uint31(self.lfsr[10], 21) f = addition_uint31(f, v) v = rotl_uint31(self.lfsr[13], 17) f = addition_uint31(f, v) v = rotl_uint31(self.lfsr[15], 15) f = addition_uint31(f, v) return f def lfsr_append(self, f): self.lfsr.append(f) if len(self.lfsr) > 16: self.lfsr.pop(0) def lfsr_init(self, u): self.lfsr_append(addition_uint31(self.lfsr_next(), u)) def lfsr_shift(self): self.lfsr_append(self.lfsr_next()) def f(self): W = ((self.x[0] ^ self.r[0]) + self.r[1]) & 0xffffffff W1 = (self.r[0] + self.x[1]) & 0xffffffff W2 = self.r[1] ^ self.x[2] u = l1(((W1 & 0x0000ffff) << 16) | (W2 >> 16)) v = l2(((W2 & 0x0000ffff) << 16) | (W1 >> 16)) self.r = [make_uint32(S0[u >> 24], S1[(u >> 16) & 0xFF], S0[(u >> 8) & 0xFF], S1[u & 0xFF]), make_uint32(S0[v >> 24], S1[(v >> 16) & 0xFF], S0[(v >> 8) & 0xFF], S1[v & 0xFF])] return W def zuc_init(self, key, iv): # Expand key. self.lfsr = [make_uint31(key[i], D[i], iv[i]) for i in range(16)] self.r = [0, 0] for i in range(32): self.bit_reorganization() w = self.f() self.lfsr_init(w >> 1) def zuc_generate_keystream(self, length): keystream_buffer = [] self.bit_reorganization() self.f() # Discard the output of F. def itor(): self.lfsr_shift() self.bit_reorganization() return self.f() ^ self.x[-1] keystream_buffer = [itor() for _ in range(length)] self.lfsr_shift() return keystream_buffer def zuc_encrypt(self, input): length = len(input) key_stream = self.zuc_generate_keystream(length) return [inp ^ key_stream[i] for i, inp in enumerate(input)]if '__main__' == __name__: key = [0x00] * 16 iv = [0x00] * 16 zuc = ZUC(key, iv) # 加密過程 out = zuc.zuc_encrypt(b"i love u") print("加密得到的字流", ["%08x" % e for e in out]) # 解密過程 zuc2 = ZUC(key, iv) out2 = zuc2.zuc_encrypt(out) print("解密得到的字流", ["%08x" % e for e in out2]) print(bytes(out2))
