Professional Documents
Culture Documents
Giao Trinh Mat Ma Hoc
Giao Trinh Mat Ma Hoc
Giao Trinh Mat Ma Hoc
thut ng vit tt
DES
Chun m d liu
LAN
Mng cc b
MDV
M dch vng
MTT
M thay th
MHV
M hon v
ECB
Ch quyn m in t
CFB
Cripher Feedback
Ch phn hi m
CBC
Ch lin kt khi m
RSA
MAC
M xc thc thng bo
OWHF
Hm bm mt chiu
CRHF
Hm bm kh va chm
MDC
M pht hin s sa i
LSB
Header
IDEA
PGP
SET
LFSR
Firewall
Bc tng la
Server
My ch
Router
B nh tuyn
Phn I
b tc v l thuyt s
1.1. S nguyn
a, b, c ta c:
(i) a a.
(ii) Nu a b v b c th a c.
(iii) Nu a b v a c th a (bx + cy ) vi x, y Z.
(iv) Nu a b v b a th a = b.
1.1.3. nh ngha 1.2 (Thut ton chia i vi cc s nguyn)
Nu a v b l cc s nguyn vi b 1
th a = qb + r; 0 r < b
q v r l nhng gi tr duy nht.
10
Gio trnh Mt m hc
V d: a = 73, b = 17.
73 div 17 = 4, 73 mod 17 = 5.
1.1.4. nh ngha 1.3 (c chung)
c l c chung ca a v b nu c a & c b.
1.1.5. nh ngha 1.4 (c chung ln nht (CLN))
(12,18) = 6
1.1.6. nh ngha 1.5 (Bi chung nh nht (BCNN))
Chng 1: B tc v l thuyt s
11
BCNN (a , b) =
a.b
(a , b)
12 .18
= 36 .
6
Vi n 2, hm (n ) c xc nh l s cc s nguyn trong
khong [1 , n ] nguyn t cng nhau vi n.
1.1.12. Cc tnh cht ca hm (n)
12
Gio trnh Mt m hc
1
1
1
K 1
(n ) = n1 1
p1
p2
pk
1.1.13. nh l 1.1
Vi n 5 th
(n ) >
n
6 ln (ln n )
phc tp bit
Cng
a+b
Tr
ab
Nhn
a.b
0((lga).(lgb)) = 0((lgn)2)
Chia
a = qb + r
0((lga).(lgb)) = 0((lgn)2)
Chng 1: B tc v l thuyt s
13
(e2 ,f2 )
(ek ,fk )
v BCNN (a , b) = p1max (e1 ,f1 ) pmax
K pmax
.
2
k
1.2.2. nh l 1.3
: CLN ca a v b.
(1)
While b 0 do
r a mod b, a b, b r
(2)
Return (a).
1.2.4. nh l 1.4
ton bit.
V d: Sau y l cc bc chia ca thut ton trn khi tnh:
(4864, 3458 ) = 38
4864 = 1.3458 + 1406
3458 = 2.1406 + 646
1406 = 2.646 + 76
646 = 5.114 + 38
76 = 2.38 + 0
14
Gio trnh Mt m hc
Ra
ax + by = d .
(1) Nu b= 0 th t d a , x 1 , y 0 v return (d, x, y)
(2) t x 2 1, x1 0, y 2 0 , y1 1
(3) While b > 0 do
(3.1) q a / b , r a qb , x x 2 qx1 , y y 2 qy1
(3.2) a b, b r, x 2 x1 , x1 x, y 2 y1 , y1 y
(4) t d a, x x 2 , y y 2 v v return (d, x, y).
1.2.6. nh l 1.5
Thut ton trn c thi gian chy c 0((lgn)2) cc php ton bit.
V d: Bng 1.2 sau ch ra cc bc ca thut ton trn vi
cc gi tr vo a = 4864 v b = 3458
Bng 1.2: Thut ton Euclide m rng
Q
x2
x1
y2
y1
4864
3458
1406
3458
1406
646
1406
646
114
646
114
76
27
38
114
76
27
38
38
32
45
76
38
27
32
38
45
91
128
38
32
91
45
128
Chng 1: B tc v l thuyt s
15
Vi cc u vo a = 4864 v b = 3458
Bi vy ta c:
CLN(4864,3458) = 38 v (4864)(32) + (3458)(-45) = 38.
1.3. Cc s nguyn modulo n
Nu a v b l cc s nguyn th a c gi l ng d vi b
theo modulo (k hiu l a = b mod n) nu n (a b) .
S nguyn n c gi l modulo ng d.
V d: 24 9 mod 5 v 24 9 = 3.5
11 17 mod 7 v 11 17 = 4.7 .
i vi a, a1 , b, b1 , c ta c:
(1) a b(mod n ) nu v ch nu a v b cng c phn d khi
chia cho n.
(2) Tnh phn x: a a(mod n ) .
(3) Tnh i xng: Nu a b(mod n ) th b a(mod n )
(4) Tnh bc cu: Nu a b(mod n ) v b c(mod n )
th a c(mod n )
(5) Nu a a1 (mod n ) v b b1 (mod n ) th
a + b a1 + b1 (mod n ) v a.b a1 .b1 (mod n )
16
Gio trnh Mt m hc
Nu a = qn + r vi 0 r n th a r(mod n ) .
Bi vy mi s nguyn a l ng d theo modulo n vi mt s
nguyn duy nht nm trong khong t 0 ti n - 1, s ny c gi
l thng d ti thiu ca a mod n. Nh vy a v r c th c
dng biu th cho lp tng ng ny.
1.3.3. nh ngha 1.10
13 + 16 = 4 v 13 + 16 = 29 4 (mod 25 )
Tng t 13.16 = 8 trong Z25.
1.3.4. nh ngha 1.11 (Phn t nghch o)
Chng hn 4 1 = 7 v 4 . 7 1 (mod 9 ) .
Chng 1: B tc v l thuyt s
17
1.3.7. nh l 1.7
x a 2 (mod n 2 )
.......... .......... ....
x a k (mod n k )
a N M
i
mod n
i =1
Trong : N i = n / n i v M i = N i 1 mod n i
Cc tnh ton ny c th c thc hin trong 0 ( (lg n ) ) cc
2
18
Gio trnh Mt m hc
1.3.10. nh l 1.9
Z *n = (n )
Cn rng nu a Z *n v b Z *n th a, b Z *n v bi vy
Z *n l ng i vi php nhn.
1.3.13. nh l 1.10
Cho p l mt s nguyn t:
(1) nh l Euler: Nu a Z *n th a (n ) 1 (mod n ) .
(2) Nu n l tch ca cc s nguyn khc nhau v nu
r s (mod (n )) th a r as (mod n ) i vi mi s nguyn a. Ni
Chng 1: B tc v l thuyt s
19
1.3.14. nh l 1.11
Cho p l mt s nguyn t:
(1) nh l Ferma: Nu (a, p) = 1 th a p 1 1 (mod p ) .
(2) Nu r s (mod p 1 ) th a r a s (mod p ) i vi mi s
nguyn a. Ni mt cch khc khi lm vic vi modulo ca mt s
nguyn t p th cc lu tha c th c rt gn theo modulo p - 1.
(3) c bit a p a (mod p ) vi mi s nguyn a.
1.3.15. nh ngha 1.15
Z *21 = {1, 2, 4 , 5, 8 , 10 , 11 , 13 , 16 , 17 , 19 , 20 }
Ch rng (21 ) = (7 ) (3 ) = 12 = Z *21 . Cp ca cc
phn t trong Z *21 c nu trong bng sau:
Bng 13: Cp ca cc phn t trong Z *21
*
a Z 21
10
11
13
16
17
19
20
Ord(a)
20
Gio trnh Mt m hc
Cho Z *n . Nu cp ca l (n ) th c gi l phn
t sinh hay phn t nguyn thy ca Z *n . Nu Z *n c mt phn t
sinh th Z *n c gi l cyclic.
1.3.18. Cc tnh cht ca cc phn t sinh ca
(1)
Z*n
Z*n
Z *n = { i mod n 0 i (n ) 1 }
(3) Gi s rng l mt phn t sinh ca
b = i mod n cng l mt phn t sinh ca
Z*n
Z*n ,
khi
nu v ch nu
l cyclic th s cc phn
(n ) / p 1(mod n ) i vi mi nguyn t p ca (n ) .
V d:
Z*21
Chng 1: B tc v l thuyt s
21
x Z*n
sao cho
(p 1)
2
v Q p =
(p 1) , tc l mt na s phn t trong
2
10
11
i mod 13
10
12
11
(p 1)(q 1)
4
22
Gio trnh Mt m hc
v Qn =
3(p 1)(q 1)
4
(1) Nu p l mt s nguyn t l v a Q n th a c gi l
cn bc hai theo modulo p.
(2) Tng qut hn, cho n = p1e1 pe22 K pekk , trong pi l cc s
nguyn t l phn bit v e i 1 . Nu a Q n th c ng 2k cn bc
hai khc nhau theo modulo n.
V d: Cc cn bc 2 ca 12 mod 37 l 7 v 30. Cc cn bc 2
ca 121 mod 315 l 11, 74, 101, 151, 164, 214, 241 v 304.
1.4. Cc thut ton trong Zn
(a + b)mod n =
a+b<n
a+bn
Chng 1: B tc v l thuyt s
23
: a Zn .
Ra
i =0
a k 2 i = (a 2
i =0
t
a =
k
) (a ) K (a )
k0
21
k1
2t
kt
k i 2i
i =0
Ra: ak mod n.
24
Gio trnh Mt m hc
(3) Nu k0 = 1 th t b a .
(4) For i from 1 to t do
(4.1) t A A 2 mod n
(4.2) Nu k i = 1 th t b A.b mod n
(5) Return (b).
V d: Bng 1.4 sau ch ra cc bc tnh ton
5596 mod 1234 = 1013
ki
25
625
681
1011
369
421
779
947
925
625
625
67
67
1059
1059
1059
1013
phc tp bit
Cng modulo
a+b
0(lgn)
Tr modulo
a-b
0(lgn)
Nhn modulo
a.b
0((lgn)2)
a-1 mod n
0((lgn)2)
ak mod n, k < n
0((lgn)3)
Nghch o modulo
Ly tha modulo
Chng 1: B tc v l thuyt s
25
p a
a Qp
a Qp
Bi vy 1 Q p nu p 1(mod 4 ) v 1 Q p nu p 3(mod 4 )
a2
a.b a b
(2)
. . Bi vy nu a Z *p th = 1 .
p p p
p
a b
(3) Nu a b(mod p ) th = .
p p
2
2
2
(4) = ( 1)(p 1)/ 8 . Bi vy = 1 nu p 1 hoc 7(mod 8)
p
p
2
v = 1 nu p 3 hoc 5(mod 8).
p
26
Gio trnh Mt m hc
p q
Ni mt cch khc = tr phi c p v q l ng d vi
q p
q
p
3(mod 4), trong trng hp ny = .
p
q
e1
p2
2 a
K
ek
CLN(a,n) 1.
a2
a.b a b
*
(2)
. . Bi vy a Z n th = 1 .
n n n
n
a a a
. .
(3)
m.n m n
Chng 1: B tc v l thuyt s
27
a b
(4) Nu a b(mod n) th = .
n n
1
(5) = 1 .
n
1
1
(6) = ( 1)(n 1) / 2 . Bi vy = 1 nu n 1(mod 4 )
n
n
1
= 1 nu n 3(mod 4 )
n
2
2
2
(7) = ( 1)(n 1)/ 8 . Bi vy = 1 nu n 1 hoc 7(mod 8 )
n
n
2
= 1 nu n 3 hoc 5(mod 8 )
n
m n
(8) = ( 1)(m 1)(n 1) / 4
n m
m n
Ni mt cch khc = tr phi c hai s m v n u
n m
m
n
ng d vi 3(mod 4 ) , trong trng hp ny = .
n
m
a1 2 e n mod a1
=
( 1)(a1 1)(n 1) / 4
n n
a1
28
Gio trnh Mt m hc
Jacobi (a, n)
Vo : S nguyn l n 3 , s nguyn a, (0 a n )
a
Ra : K hiu Jacobi (S l k hiu Legendre khi n l s
n
nguyn t)
(1) Nu a = 0 th return (0)
(2) Nu a = 1 th return (1)
(3) Vit a = 2ea1, trong a1 l mt s l
(4) Nu e chn th t s 1 . Ngc li hy t s 1 nu
n = 1 hoc 7(mod 8)
(5) Nu n 3(mod 4 ) v a1 3(mod 4 ) th t s s
(6) t r1 n mod a1
(7) Return (s.JACOBI(n1 , a1 ))
Thut ton trn c thi gian chy chng 0 ( (lg n ) ) cc php
2
ton bit.
1.5.6. Nhn xt (tm cc thng d bc hai theo modulo ca
s nguyn t p)
Chng 1: B tc v l thuyt s
29
a
mn = 1 . Php lp i vi s c chn trc khi tm c
p
= ( 1)
( 1)
235 235 235
79
79
77
2
76 . 78 / 4
= ( 1)
= = 1
79
77
a
Khc vi k hiu Legendre, k hiu Jacobi khng cho
n
ngha l a Q n .
1.5.8. V d (Cc thng d bc 2 v khng bc 2)
Bng 1.6: Cc k hiu Jacobi ca cc phn t trong
Z*21
*
a Z 21
10
11
13
16
17
19
20
a2 mod n
16
16
16
16
a
3
a
7
21
30
Gio trnh Mt m hc
*
Bng 1.6 lit k cc phn t trong Z 21 v cc k hiu Jacobi
a
Cho n 3 l cc s nguyn t l v cho J n = a Z *n = 1
n
) c nh
tp cc thng d gi bc 3 theo modulo n (K hiu Q
n
ngha l tp J n Q n .
1.5.10. nh l 1.15
cc thng d gi bc hai.
1.6. Cc s nguyn blum
n = p.q , trong p
Chng 1: B tc v l thuyt s
31
hon v.
nh x ngc ca f l: f 1 (x ) = x ((p1)(q 1)+4 / 8 ) mod n .
Bi tp
1. S dng thut ton Euclide m rng tm c chung ln
nht ca hai s a = 1573, b = 308.
2. Hy tnh 322 mod 23 bng cch dng thut ton nhn v
bnh phng c lp.
3. Hy tnh cc cn bc hai ca 12 mod 37.
*
.
4. Tm tt c cc phn t nguyn thy ca nhm nhn Z19
32
Gio trnh Mt m hc
( )
1
a. p s = ps 1 .
p
b. ( m, n ) = ( m ) ( n ) nu CLN (m,n) = 1.
Chng 1: B tc v l thuyt s
33
n
p 1 = p eii
i =1
x(
p 1) p i
1mod p vi 1 i n .
i s tru tng
2.1. Nhm
SxS
vo S. Tc l * l mt quy tc gn mi cp c sp
a, b, c G .
a G
(3) Vi mi a G , tn ti mt phn t a 1 G c gi l
ngc ca a sao cho a * a 1 = a 1 * a = 1
(4) Nhm c gi l giao hon (hay nhm Abel) nu
a*b = b*a
a, b, G
36
Gio trnh Mt m hc
2.1.3. Nhm hu hn
nh ngha 2.2: Nhm G hu hn nu G l hu hn. S cc
phn t ca nhm G c gi l cp ca nhm.
V d v nhm:
- Tp cc s nguyn Z vi php ton cng s to nn mt
nhm. Phn t n v ca nhm ny l 0, phn t ngc ca mt
s nguyn a l s nguyn a.
- Tp
Tp
Z n vi
Zn
Z*n s
l mt
2.1.5.2. nh l 2.1:
Nu G l mt nhm v a G th tp tt c cc ly tha ca a
s to nn mt nhm con xyclic ca G. Nhm ny c gi l nhm
con sinh bi a v c k hiu l a .
37
2.1.6. Cp ca mt phn t
2.1.6.1. nh ngha 2.5
Cho G l mt nhm v a G . Cp ca a c xc nh bng
s nguyn dng t nh nht m bo at = 1. Nu khng tn ti t
nh vy th cp ca a c coi l .
2.1.6.2. nh l 2.2
Cho G l mt nhm v a G l mt phn t c cp t hu
hn. Khi a (lc lng ca nhm con sinh bi a) bng t.
2.1.6.3. nh l 2 (Lagrange)
Nu G l mt nhm hu hn v H l mt nhm con ca G,
khi H l c ca G . Bi vy, nu a G th cp ca a l c
ca G .
2.1.6.4. nh l 2.4
Mi nhm con ca mt nhm xyclic u l nhm xyclic. Nu
G l mt nhm xyclic cp n th i vi mi c dng d ca n, G s
cha ng mt nhm con cp d.
2.1.6.5. nh l
Cho G l mt nhm.
(1) Nu cp ca mt phn t a G l t th cp ca a k l
t/CLN(t,k).
(2) Nu G l mt nhm xyclic cp n v d n th G c ng
(d ) phn t c cp d. c bit G c (n ) phn t sinh.
*
V d: Xt nhm nhn Z19
= {1, 2, ...,18} c cp 18. Nhm ny
38
Gio trnh Mt m hc
Bng 2.1: Cc nhm con ca
*
Z19
Nhm con
Cc phn t sinh
Cp
{1}
{1,18}
18
{1,7,11}
7,11
{1,7,8,11,12,18}
8,12
{1,4,5,6,7,9,11,16,17}
4,5,6,9,16,17
{1,2,3,...,18}
2,3,10,13,14,15
18
2.2. Vnh
a, b, c R
a R
(b + c ) a = (b a ) + (c a )
a, b, c R
a, b R .
2.2.2. Cc v d
- Tp cc s nguyn Z vi cc php ton cng v nhn thng
thng l mt vnh giao hon.
39
1 = 0 .
i =1
modulo n) nu v ch nu n l s nguyn t. Nu n l mt s
nguyn t th Zn c c s n.
40
Gio trnh Mt m hc
2.3.4. nh l 2.8
Nu c s m ca trng khng bng khng th m phi l s
nguyn t.
2.3.5. nh ngha 2.10
Mt tp con F ca trng E l mt trng con ca E nu F l
mt trng cng vi cc php ton trong E. Khi E c gi l
trng m rng ca F.
2.3.6. Trng hu hn
2.3.6.1. nh ngha 2.11
Trng hu hn l mt trng F c cha mt s hu hn cc
phn t. Cp ca trng F l s cc phn t trong F.
2.3.6.2. Cc tnh cht c bn
a. nh l 2.9: S tn ti v tnh duy nht ca cc trng hu hn.
- Nu F l mt trng hu hn th F cha
pm
phn t vi p
cp
pm
(m 1) .
p m . Trng ny c k hiu l GF (p m ) .
41
pn
( )
ap = a .
d. nh ngha 2.12:
Cc phn t khc khng ca Fq to nn mt nhm vi php
nhn c gi l nhm nhn ca Fq v c k hiu l Fq* .
e. nh l 2.12:
Fq* l nhm nhn cyclic cp q 1 . Bi vy a q = a vi a Fq .
f. nh ngha 2.13:
Phn t sinh ca nhm cyclic Fq* c gi l phn t nguyn
thy hay phn t sinh ca Fq .
g. nh l 2.13:
Nu
a , b Fq l mt trng hu hn c s p, khi :
(a + b)p
= a p + bp
t 0 .
42
Gio trnh Mt m hc
Trong a i R v n 0 . Phn t a i c gi l h s ca x i
trong f(x).
S nguyn ln nht m sao cho a m 0 c gi l bc ca f(x)
v c k hiu l degf(x), a m c gi l h s cao nht ca f(x).
Nu f(x) = a0 (a thc hng s) v a 0 0 th f(x) c bc 0. Nu tt
c cc h s ca f(x) l 0 th f(x) c gi l a thc khng v bc
ca n ( thun tin v mt ton hc) c xc nh bng .
a thc f(x) c gi l nh chun nu h s cao nht ca n
bng 1.
2.4.2. Vnh a thc
- nh ngha 2.14: Nu R l mt vnh giao hon th vnh
a thc
43
tha mn: g (x ) = q (x ). h(x ) + r(x ) , trong deg r(x ) < deg h(x ) , q(x)
v r(x) l duy nht q(x) c gi l thng, r(x) c gi l phn d.
i khi r(x) c k hiu g (x )mod h(x )
g(x) c k hiu g (x ) div h(x )
V d: g (x ) = x6 + x5 + x3 + x 2 + x + 1
h(x ) = x 4 + x 3 + 1 l cc a thc trong Z2 [x ] .
Ta c
g (x ) = x 2 h(x ) + x3 + x + 1
44
Gio trnh Mt m hc
(4)
Tnh
cht
bc
cu:
Nu
g (x ) h(x ) (mod f (x ))
g (x ), r(x )F[x ]
tha mn
g (x ) = q (x ) f (x ) + r(x ) , trong
2.4.7.3. nh l 2.15
45
Zp [x], ei
l cc s nguyn dng,
a Zp .
Phn tch
Ra
: CLN
(2) Return
(g(x)) .
46
Gio trnh Mt m hc
2.4.9. S hc ca cc a thc
Biu din a thc l cch biu din thng dng nht cho cc
phn t ca trng hu hn Fp vi q = pm v p l s nguyn t.
2.4.9.1. nh l 2.17
Vi mi gi tr m 1 , tn ti mt a thc bt kh quy nh
chun bc m trn Z p . Bi vy, mi trng hu hn u c biu
din a thc.
( )
( )
Ra
( )
( )
( )
47
( )
Ra : g (x )1 F pm
(s(x)).
( )
( )
Trng hu hn F(24) cp 16
C th thy rng f (x ) = x 4 + x + 1 l mt a thc bt kh quy
trn Z 2 . Bi vy trng hu hn F(24) c th c biu din bng
tp tt c cc a thc trn F2 c bc nh hn 4. Tc l:
F(24 ) = { a3 x 3 + a 2 x 2 + a1 x + a 0 a i {0 ,1}}
48
Gio trnh Mt m hc
Sau y l cc v d v s hc ca trng:
- Php cng
: (1 0 11) + (1 0 0 1) = (0 0 1 0 )
- Php nhn
(x
)(
+ x2 + 1 . x2 + 1
= x 6 + x5 + x 2 + 1 x 3 + x 2 + x + 1 (mod (x ))
Bi vy (11 0 1) + (1 0 0 1) = (1111)
( )
(x
)(
+ x2 + 1 . x2 + 1
= x 5 + x 2 + x + 1 1(mod (x ))
T (1 0 11). (0 1 0 1) = (0 0 0 1)
f(x)l mt a thc nguyn thy hay phn t x = (0 0 1 0 ) l
( )
khc khng trong F (2 ) c th nhn c bng cc ly tha ca x.
Ta c bng sau:
Bng 2.2: Cc ly tha ca x theo modulo f (x ) = x 4 + x + 1
i
xi mod (x4 + x + 1)
Biu din vc t
(0001)
(0010)
(0100)
(1000)
x+1
(0011)
x2 + x
(0110)
x3 + x2
(1100)
x3 + x + 1
(1011)
49
xi mod (x4 + x + 1)
Biu din vc t
x2 + 1
(0101)
x3 + x
(1010)
10
x + x +1
3
11
12
(0111)
x +x +x
3
(1110)
x +x +x+1
13
(1111)
x +x +1
(1101)
14
x +1
(1001)
Ta xt vnh a thc Z 2 [x ] / x n + 1 .
- nh ngha 2.20: a thc e(x) c gi l a thc ly ng
nu e 2i (x ) = e i (x ) .
Cho a(x ) Z 2 [x ] / x n + 1 cp ca a(x) (k hiu l ord(a(x )) ) l s
nguyn dng nh nht t sao cho: [a(x )]t +1 a(x )mod x n + 1 hay
Trong e i (x ) l mt a thc ly ng
no trong vnh.
- nh l 2.20: Cp ln nht ca mt a thc trong vnh
Z 2 [x ] / x n + 1 c xc nh nh sau:
+ max ord(a(x )) = 2k vi n = 2k
+ max ord(a(x )) = 2m 1 vi n l l v phn tch ca x n + 1
thnh tch ca cc a thc bt kh quy c dng x n + 1 =
g (x )
i
vi m = max ord g i (x ) .
i
+ max ord(a(x )) = 2l 2m 1
tch ca x u + 1 c dng x u + 1 =
vi n = 2l u . Trong u l v phn
g (x ) v m = max ord
i
g i (x ) .
50
Gio trnh Mt m hc
- V d: Xt vnh Z 2 [x ] / x5 + 1
Ta c x5 + 1 = (1 + x ) 1 + x + x 2 + x 3 + x 4
Vy max ord(a(x )) = 24 1 = 15
Cp ca mi a thc trong vnh s l 15 hoc c ca 15.
2.4.10.2. Cc nhm nhn
)(
Ta c x 7 + 1 = (1 + x ) 1 + x + x 3 1 + x 2 + x 3
M = 23 1 = 7
x , e
i
= x + x 2 + x 4 , e 4 = 1 + x 3 + x5 + x6
i =1
e5 = 1 + x + x + x , e6 = x + x + x , e7 (x ) =
2
xi
i =0
51
- V d: Xt vnh Z 2 [x ] / x 7 + 1 .
a thc f (x ) Z2 [x ] / x n + 1 c gi l mt thng d bc 2
trong vnh nu f (x ) 0 v tn ti g(x) sao cho:
g 2 (x ) f (x )mod x n + 1
Gi Q l tp hp cha cc thng d bc 2.
2.4.11.2. B 2.22
Vi n l mi f (x ) 0 u l thng d bc 2. Mi f(x) u c
mt cn bc 2 duy nht. Ta c: Q = 2n 1
2.4.11.3. B 2.23
thc c m chn. Ta c: Q = 2 2 1 .
2.4.11.4. B 2.24
g (x ) = 1 + x 2
x t + (x )
tU
52
Gio trnh Mt m hc
n
Ta c U =
n
22
. Nu f (x ) =
f x
2i
th
f (x ) =
f x
i
( f (x ) c gi
l cn bc 2 chnh ca f(x)).
Cc g(x) c gi l cc phn t lin hp.
- V d: n = 8
x2
x4
x6
x8 = 1
(1)
(2)
(3)
(4)
(014)
(024)
(034)
(015)
(126)
(125)
(135)
(016)
(137)
(237)
(236)
(037)
(5)
(6)
(7)
(4)
(045)
(046)
(047)
(145)
(256)
(156)
(157)
(246)
(257)
(367)
(267)
(347)
(01246)
(01245)
(01345)
(01256)
10
(01347)
(02347)
(02346)
(01357)
11
(12367)
(12357)
(12356)
(02367)
12
(02456)
(01456)
(01457)
(12456)
13
(03457)
(03467)
(02467)
(13457)
14
(23567)
(13567)
(12567)
(23467)
15
(0123467)
(0123457)
(0123456)
(0123567)
16
(0234567)
(0134567)
(0124567)
(1234567)
TT
53
Bi tp
1. Tnh tt c cc cn bc hai ca a thc 1 + x2 + x 4 trong
vnh a thc Z2 [ x ] x8 + 1 .
2. Xc nh nhm nhn xyclic sinh bi phn t a ( x ) = 1 + x + x2
trong vnh a thc Z 2 [ x ] x5 + 1 .
3. Xt tp S = {0,1,2,3} vi cc php ton cng (+) v nhn (.)
c xc nh nh sau:
+
6. Tm tt c cc cn bc 2 ca cc n thc 1, x 2 , x 4 trong
vnh a thc Z2 [ x ] x6 + 1
7. Trong trng 6F(25 )
z2 [x ] /( x5 + x 2 + 1) .
c th xy dng c theo
54
Gio trnh Mt m hc
)(
a. Tnh x 4 + x 2 . x3 + x + 1 .
( a1 + a 2 + K as )p
= a1p n + a 2p n + K + a sp n .
Phn II
Cc thut ton mt m
mt m c in
C ba phng php chnh trong mt m c in (mt m
kha ring hay mt m kha b mt):
- Hon v;
- Thay th;
- X l bit (ch yu nm trong cc ngn ng lp trnh).
Ngoi ra cn c phng php hn hp thc hin kt hp cc
phng php trn m in hnh l chun m d liu (DES Data
Encryption Standard) ca M.
3.1. S khi mt h truyn tin mt
Thm m
Bn m
Bn r
Ngun tin
(Alice)
B m ha
Bn m
Knh m
(khng an ton)
KE
Bn r
B gii m
KD
Knh an ton
Ngun kha
Hnh 3.1
(Oscar)
Nhn tin
(Bob)
58
Gio trnh Mt m hc
nh ngha 3.1
Mt h mt l mt b 5 (P, C, K, E, D) tha mn cc iu
kin sau:
a) P l mt tp hu hn cc bn r c th
b) C l mt tp hu hn cc bn m c th
c) K l mt tp hu hn cc kha c th (khng gian kha)
d) i vi mi k K c mt quy tc m e k E
ek : P C
sao cho: d k (e k (x )) = x vi x P .
3.2. Mt m thay th
Gi s P = C = K = Z26 vi 0 k 25 , ta nh ngha:
e k (x ) = x + k mod 26
d k (y ) = y k mod 26
(x, y Z26 )
M tng ng
10
11
12
K t
M tng ng
13
14
15
16
17
18
19
20
21
22
23
24
25
Chng 3: Mt m c in
59
V d 3.1:
60
Gio trnh Mt m hc
d (y ) = 1 (y )
K t bn m
K t bn r
K t bn m
K t bn r
K t bn m
K t bn r
V d 3.2:
Chng 3: Mt m c in
61
ta thu c bn r sau:
THHMTHXMVUSHM
S dng php hon v ngc, ta d dng tm li c bn r
ban u.
Mi kha ca m thay th l mt php hon v ca 26 k t.
S cc hon v ny l 26 ! > 4.1026 . y l mt s rt ln nn kh c
th tm c kha bng php tm kha vt cn. Tuy nhin, bng
phng php thng k, ta c th d dng thm c cc bn m
loi ny.
3.2.3. Mt m Vigenre
19
12
19
18
20
13
18
19
Bn r
15
17
15
17
Kha
14
12
19
16
21
17
Bn m
62
Gio trnh Mt m hc
Nh vy, dy k t tng ng vi xu bn m s l:
OMTAQVCBHBRJGB
Ta c th m t mt m Vigenre nh sau:
Cho m l mt s nguyn dng c nh no .
Ta nh ngha P = C = K = (Z 26 )n
Vi kha k = (k 1 , k 2 , K, k m ) , ta xc nh:
e k (x1 , x 2 , K, x m ) = (x1 + k1 , x 2 + k 2 , K, x m + k m )
d k (y1 , y 2 , K, y m ) = (y1 k 1 , y 2 k 2 , K, y m k m )
Chng 3: Mt m c in
63
Gi s ta c bn r: asecondclasscarriageonthetrain
Trc tin, ta nhm bn r thnh cc nhm 6 k t:
a sec on dclass carria geonth etrain
{ 1, 2, K, m } .
i vi mt kha (tc l mt php hon v no ), ta xc nh:
e = (x1 , K , x m ) = x (1 ), K , x (m )
v d = ( x1 , K , x m ) = y 1 (1), K , y 1 (m )
64
Gio trnh Mt m hc
3.4. Mt m Hill
(y1
11 8
y2 ) = (x1 x2 )
3 7
( )
k = k i, j ,
vi
x = (x1 , x 2 , K , x m ) P
kK ,
y = ek (x ) = (y1 , y2 , K , ym ) nh sau :
k1,1
k
(y1 , K, ym )(x1 , K, xm ) 2,1
M
k m,1
Ni cch khc, y = xk .
k1, 2
k 2, 2
M
k m, 2
k1, m
K k 2, m
M
L k m, m
K
ta tnh
Chng 3: Mt m c in
65
B = b l, k
a i, j b j, k
j 1
=
vi 1 i l v 1 k l . Tc l cc phn t hng i v ct th
k ca AB c to ra bng cch ly hng th i ca A v ct th k
ca B, sau nhn tng ng cc phn t vi nhau v cng li.
Cn rng AB l mt ma trn cp l n .
Theo nh ngha ny, php nhn ma trn l kt hp (tc
I 2 =
0 1
66
Gio trnh Mt m hc
I m c gi l ma trn n v v AI m = A vi mi ma trn
yk 1 = (xk )k 1 = x kk 1 = xIm = x
3 7
7 18
=
23 11
v
12 8 8 18 11 7 + 8 23 11 18 + 8 11
3 7 23 11 3 7 + 7 23 3 18 + 7 11
261 286 1 0
=
=
182 131 0 1
Chng 3: Mt m c in
67
V d 3.5:
Gi s kha
11 8
k =
3 7
k 1 =
23 11
(9
(11
11 8
= (99 + 60 72 + 140 ) = (3 4 )
20 )
3 7
11 8
= (121 + 72
24 )
3 7
88 + 168 ) = (11
22)
(3
68
Gio trnh Mt m hc
nh ngha 3.2:
nh thc ca ma trn A = (ai, j ) cp 2 2 l gi tr
det A = a1,1a 2, 2 a1, 2 a 2,1
( 1)i+ j det k ji
th chng t rng:
k 1 = (det k ) k *
1
Bi vy k l kh nghch.
Ngc li, k c nghch o k 1 . Theo quy tc nhn ca
nh thc:
Chng 3: Mt m c in
69
a1, 2
a1,1
Tr li v d xt trn. Trc ht ta c:
11 8
= 11 7 8 3 mod 2
det
3 7
= 77 24 mod 26 = 53 mod 26 = 1
3 7
7 18
=
23 11
70
Gio trnh Mt m hc
V n = 2k nn: xn + 1 = (1 + x )n .
Do , mi a thc a(x) c trng s l u tha mn iu kin:
(a(x), (1 + x) ) = 1
n
(3.1)
Chng 3: Mt m c in
71
B 3.2:
k 1
(3.2)
tc l:
72
Gio trnh Mt m hc
g 2 (x ) = f (x ) mod xn + 1
Nu g (x ) =
g x
th f (x ) =
g x
i
2i
Xt a(x ) G . a(x ) =
a x . Ta c b sau:
i
B 3.4:
C2ni 21
V d 3.6: n = 8
C tt c 26 = 64 cc phn t cp n.
Ta c th s dng cc phn t ny xy dng cc nhm
nhn xyclic cp n.
Chng 3: Mt m c in
73
.22
(3.3)
V d 3.7:
n=8
n = 16
n = 32
n = 64
n = 128
74
Gio trnh Mt m hc
k 1
i
Sn =
1 + 2
i = 0
(3.4)
Hin nhin l Sn 0 .
H mt xy dng trn cc cp s nhn ny c th c m t
theo s khi sau:
H mt
I
Vo
Vo
Ra
A(, )
Kha
A(, )
A(, )
M ha
Gii m
Ra
A (, )
Kha
Hnh 3.3
. 2
M
. 0
Chng 3: Mt m c in
75
Hay
( )
2 2 2
A
K
1442443
k ln
76
Gio trnh Mt m hc
V d 3.8: n = 8
A, = { (012), (024 ), 01356, (4 ), (456 ), (046 ), (12457 ), (0 ) }
0 0 0 1 0 0 0 0
0 0 0 1 1 1 0 0
0 0 0 1 0 1 0 1
1 1 0 1 1 0 1 0
0 0 0 0 0 0 0 1
M ha
Ra
Vo
Gii m
Ra
(A2)2 =
V d 3.9:
Chng 3: Mt m c in
77
( )
I = B 2
A=
a(x )
xa(x )
a0
=
x n 1 a(x )
a n 1
M
a1
a1
K a n 1
a 0 K a n 2
M
a2 K
aF
a0
B 3.8:
n 1
a x
i
i =0
78
Gio trnh Mt m hc
B 3.9:
A.B = C
Trong :
B 3.10:
)
(
(a(x), (x
2k
2k
+ 1 = a(x ), (x + 1) = 1 .
B 3.11:
Chng 3: Mt m c in
79
80
Gio trnh Mt m hc
V d 3.10:
(7)
(6)
(5)
(4)
(3)
(2)
(1)
(0)
(10110101)
(00001000)
Ra
A = {(0)', (1)',..., (7)'}
(7)'
(6)'
(5)'
(4)'
(3)'
(2)'
(1)'
(0)'
(00001000)
(10110101)
Ra
A = {(0), (1),..., (7)}
Chng 3: Mt m c in
81
a 1 (x ) = x + x 2 + x 4 + x 5 + x 7
Ta c:
A.A 1 =
1 1 1 0 0 0 0 0
0 1 1 0 1 1 0 1
0 1 1 1 0 0 0 0
0 0 1 1 1 0 0 0
1 0 1 1 0 1 1 0
0 1 0 1 1 0 1 1
0 0 0 1 1 1 0 0 1 0 1 0 1 1 0 1
0 0 0 0 1 1 1 0 1 1 0 1 0 1 1 0
0 0 0 0 0 1 1 1
0 0 0 0 0 0 1 1
0 1 1 0 1 0 1 1
1 0 1 1 0 1 0 1
0 0 0 0 0 0 0 1
1 1 0 1 1 0 1 0
1 0 0 0 0 0 0 0
0 1 0 0 0 0 0 0
0 0 1 0 0 0 0 0
=
0 0 0 1 0 0 0 0
0 0 0 0 1 0 0 0
0 0 0 0 0 1 0 0
=I
0 0 0 0 0 0 1 0
0 0 0 0 0 0 0 1
3.6. M Affine
a = 1, ta c MDV).
82
Gio trnh Mt m hc
(y Z 26 )
ho hp l: x v x + 13 s m ho thnh cng mt gi tr i vi
bt k x Z 26 .
Ta gi thit CLN(a, 26) = 1. Gi s vi x1 v x 2 no
tha mn:
ax 1 ax 2 (mod 26 )
Khi :
a(x1 x 2 ) 0 (mod 26 )
Chng 3: Mt m c in
83
bi vy
26 a(x1 x 2 )
a bc
th
a c.
26 a(x1 x2 )
CLN(a, 26 ) = 1 nn ta c:
26
(x1 x2 )
tc l
x1 x2 (mod 26 )
m an ton).
84
Gio trnh Mt m hc
Gi s a 1 v m 2 l cc s nguyn. CLN(a, m) = 1 th
ta ni rng a v m l nguyn t cng nhau. S cc s nguyn
trong Z m nguyn t cng nhau vi m thng c k hiu l (m )
(hm ny c gi l hm phi-Euler).
Gi s m =
p ei
i =1
(pei
i =1
p ei i 1
Chng 3: Mt m c in
85
86
Gio trnh Mt m hc
11 = 1 , 3 1 = 9, 5 1 = 21, 7 1 = 15, 111 = 19, 17 1 = 23, 25 1 = 25.
(C
th
dng
kim
chng
li
iu
ny,
d:
7 5 = 105 1 mod 26 , bi vy 71 = 15 ).
a 1 (ax ) a 1 .a x = 1.x = x
Chng 3: Mt m c in
87
e k (x ) = 7x + 3
V hm gii m tng ng l:
d k (x ) = 15(y 3 ) = 15 y 19
= 15(7x + 3 ) 19
= x + 45 19
=x
Cho P = C = Z26 v gi s:
K = {(a, b) Z26 Z26: CLN(a, 26 = 1}
Vi k = (a, b) K, ta nh ngha:
ek(x) = ax + b mod 26
v dk(y) = a-1(y b) mod 26
88
Gio trnh Mt m hc
3.7. CC H MT M TCH
(P, P, K 1 K 2 , E, D)
Kha ca h mt tch c dng k = (k1 , k 2 ) trong k1 K 1
v k 2 K 2 . Cc quy tc m v gii m ca h mt tch c xc
nh nh sau: Vi mi k = (k1 , k 2 ) , ta c mt quy tc m e k xc
nh theo cng thc:
e (k1 , k2 ) (x ) = e k2 e k1 (x )
v quy tc gii m:
d (k1 , k2 ) (y ) = d k1 d k2 (y )
Chng 3: Mt m c in
89
( (
))
(d k (e k (e k (x ))))
(e k (x ))
=x
ea(x) = ax mod 26
90
Gio trnh Mt m hc
xc
sut
ca
mt
kha
trong
Affine
l:
kha a v k. Bi vy M S l h m Affine.
By gi ta s xt S M . Mt kha ny trong h m ny c
dng (k, a ) , trong :
e (k, a ) (x ) = a(x + k ) = ax + ak mod 26
(a, ak )
Chng 3: Mt m c in
91
(S1 S2 ) S3 = S1 (S2 S3 )
Nu ly tch ca mt h mt t ng cu vi chnh n th ta
thu c h mt S S (k hiu l S2 ). Nu ly tch n ln th h
mt kt qu l Sn . Ta gi Sn l h mt lp.
Mt h mt S c gi l ly ng nu S2 = S . C nhiu h
mt nghin cu trong chng 1 l h mt ly ng. Chng hn
cc h MDV, MTT, Affine, Hill, Vigenre v hon v u l ly
ng. Hin nhin l nu h mt S l ly ng th khng nn s
dng h mt tch S2 v n yu cu lng kha cc ln m khng c
bo mt cao hn.
Nu mt h mt khng phi l ly ng th c th lm tng
mt bng cch lp nhiu ln. tng ny c dng trong
chun m d liu (DES). Trong DES dng 16 php lp, tt nhin
h mt ban u phi l h mt khng ly ng. Mt phng php
c th xy dng cc h mt khng ly ng n gin l ly tch
ca hai h mt n gin khc nhau.
Nhn xt:
92
Gio trnh Mt m hc
z i = fi (k, x1 , K, x i 1 )
lin tip z1 , y1 , z 2 , y 2 , K
Chng 3: Mt m c in
93
6. Vi mi z L c mt quy tc m e z E v mt quy tc
gii m tng ng d z D . e z : P C v d z : C P l cc hm
tho mn d z (e z (x )) = x vi mi bn r x P .
94
Gio trnh Mt m hc
m 1
c jz i + j
j= 0
mod 2
Chng 3: Mt m c in
95
(k1 , K, k m ) = (0, K, 0)
(0, 0, 0, 0)
96
Gio trnh Mt m hc
c jk j + 1
j= 0
k1
k2
k3
k4
Chng 3: Mt m c in
97
Cho P = C = k = L = Z26
Cho z1 = k v zi = xi-1 (i 2)
Vi 0 z 25, ta xc nh
ez(x) = x + z mod 26
dz(y) = y - z mod 26
(x, y) Z26
20
12
Bn m dng k t l: ZVRQHDUJIM.
By gi ta xem Alice gii m bn m ny nh th no. Trc
tin, Alice bin i xu k t thnh dy s:
25
21
17
16
20
12
98
Gio trnh Mt m hc
Sau c ta tnh:
x1 = d 8 (25 ) = 25 8 mod 26 = 17
3.9.1. M u
Chng 3: Mt m c in
99
R i = L i 1 f (R i 1 , k i )
R i-1
Li
Ki
Ri
100
Gio trnh Mt m hc
(b 2 b3b 4 b5 )
Chng 3: Mt m c in
101
J
A
E
E(A)
B1
B2
B3
B4
B5
B6
B7
B8
S1
S2
S3
S4
S5
S6
S7
S8
c1
c2
c3
c4
c5
c6
c7
c8
f(A, J)
9 1
59 51 43 35 27 19 11 3
61 53 45 37 29 21 13 5
63 55 47 39 31 23 15 7
102
Gio trnh Mt m hc
9 49 17 57 25
10
11
12
13
12
13
14
15
16
17
16
17
18
19
20
21
20
21
22
23
24
25
24
25
26
27
28
29
28
29
30
31
32
Tm hp S l:
S1
14
13
15
4
15
15
11
10
12
4 14
13
1 10
12
11
14
8 13
11 15
12
10
12
11
14
10
6 13
Chng 3: Mt m c in
103
S2
15
13
0
13
14
11
13
12
10
7 15
14
12
10
11
14
11 10
4 13
8 12
15
10
11
12
14
11
15
S3
10
14
15
13 12
13
10
5 14
12
11
15
13
15
11
2 12
10
14
10
13
15 14
11
12
S4
7
13
14
10
11
12
15
13
11
15
12
10
14
10
12
11
13 15
14
15
10
13
11
12
14
S5
2
12
10
11
15
13
14
0 15
14 11
12
13
11 10
13
15
11
12
14
13
6 15
10
12
14
10
14
15
11
13 14
0 11
11
13
S6
12
10
15
13
10 15
12
10
1 13
15 10
11
14
14
15
8 12
12
S7
4
11
13
11
11
11
13
14 15
13
12
10
10
14
12
15
13 12
14
10
15
4 10
15
14
12
7
8
104
Gio trnh Mt m hc
S8
13
15
11
10
14
12
15 13
10
12
11
14
11
12
14
10
13
15
14
10
8 13
15
12
11
20
21
29
12
28
17
15
23
26
18
31
10
32
27
19
13
30
22
11
25
2. Vi i thay i t 1 n 16:
Chng 3: Mt m c in
105
Ci = LSi (C i 1 )
D i = LSi (D i 1 )
PC - 1
C0
D0
LS1
LS1
C0
D0
LS16
LS16
C16
D16
PC - 2
K1
PC - 2
K16
49
41
33
25
17
58
50
42
34
26
18
10
59
51
43
35
27
19
11
60
52
44
36
63
55
47
39
31
23
15
62
54
46
38
30
22
14
61
53
45
37
29
21
13
28
20
12
106
Gio trnh Mt m hc
PC-2
14
17
11
24
28
15
21
10
23
19
12
26
16
27
20
13
41
52
31
37
47
55
30
40
51
45
33
48
44
49
39
56
34
53
46
42
50
36
29
32
Vng 2
2 43 26 52 41 9 25 49 59 1 11 34
60 27 18 17 36 50 51 58 57 19 10 33
14 20 31 46 29 63 39 22 28 45 15 21
53 13 30 55 7 12 37 6 5 54 47 23
Vng 3
51 27 10 36 25 58 9 33 43 50 60 18
44 11 2
1 49 34 35 42 41 3 59 17
61 4 15 30 13 47
23 6 12 29 62 5
37 28 14 39 54 63 21 53 20 38 31 7
Chng 3: Mt m c in
107
Vng 4
35 11 59 49 9 42 58 17 27 34 44 2
57 60 51 50 33 18 19 26 25 52 43 1
45 55 62 14 28 31 7 53 63 13 46 20
21 12 61 23 38 47 5 37 4 22 15 54
Vng 5
19 60 43 33 58 26 42 1 11 18 57 51
41 44 35 34 17
3 10
36 27 50
29 39 46 61 12 15 54 37 47 28 30 4
5 63 45
7 22 31 20 21 55
62 38
Vng 6
3 44 27 17 42 10 26 50 60 2 41 35
25 57 19 18 1 51 52 59 58 49 11 34
13 23 30 45 63 62 38 21 31 12 14 55
20 47 29 54
6 15
39 53 46 22
Vng 7
52 57 11 1 26 59 10 34 44 51 25 19
9 41 3 2 50 35 36 43 42 33 60 18
28 7 14 29 47 46 22 5 15 63 61 39
4 31 13 38 53 62 55 20 23 37 30 6
Vng 8
36 41 60 50 10 43 59 18 57 35 9 3
58 25 52 51 34 19 49 27 26 17 44 2
12 54 61 13 31 30 6 20 62 47 45 23
55 15 28 22 37 46 39 4
7 21 14 53
Vng 9
57 33 52 42 2 35 51 10 49 27 1 60
50 17 44 43 26 11 41 19 18 9 36 59
4 46 53 5 23 22 61 12 54 39 37 15
47 7 20 14 29 38 31 63 62 13 6 45
108
Gio trnh Mt m hc
Vng 10
41 17 36 26 51 19 35 59 33 11
34
57 27 10 60 25 3
55 30 37 20
31 54
50 44
58 49 43
45 63 38 23 21 62
4 61 13 22 15 47 46 28 53 29
Vng 11
25 1 49 10 35 3 19 43 17 60 34 57
18 50 41 11 59 44 9 52 51 42 33 27
39 14 21 4 54 53 29 47 22 7 5 46
15 38 55 45 28 6 62 31 30 12 37 13
Vng 12
9 50 33 59 19 52 3 27 1 44 18 41
2 34 25 60 43 57 58 36 35 26 17 11
23 61 5 55 38 37 13 31
6 54 20 30
62 22 39 29 12 53 46 15 14 63 21 28
Vng 13
58 34 17 43 3 36 52 11 50 57 2 25
51 18
9 44 27 41 42 49 19 10 1 60
7 45 20 39 22 21 28 15 53 38 4 14
46 6 23 13 63 37 30 62 61 47 5 12
Vng 14
42 18 1 27 52 49 36 60 34 41 51 9
35 2 58 57 11 25 26 33
3 59 50 44
54 29 4 23 6 5 12 62 37 22
55
61
30 53 7 28 47 21 14 46 45 31 20 63
Vng 15
26 2 50 11 36 33 49 44 18 25 35 58
19 51 42 41 60 9 10 17 52 43 34 57
38 13 55 7 53 20 63 46 21 6
39 45
14 37 54 12 31 5 61 30 29 15 4 47
Chng 3: Mt m c in
109
Vng 16
18 59 42 3 57 25 41 36 10 17 27 50
11 43 34 33 52 1 2 9 44
30 5 47 62 45 12 55 38
35
26
49
13 61 31 37
6 29 46 4 23 28 53 22 21
63
39
110
Gio trnh Mt m hc
E(R0) = 011110100001010101010101011110100001010101010101
K1 = 000110110000001011101111111111000111000001110010
E(R0) K1 = 011000010001011110111010100001100110010100100111
S-box outputs 01011100100000101011010110010111
f(R0,K1) = 00100011010010101010100110111011
L2 = R1 = 11101111010010100110010101000100
E(R1) = 011101011110101001010100001100001010101000001001
K2 = 011110011010111011011001110110111100100111100101
E(R1) K2 = 000011000100010010001101111010110110001111101100
S-box outputs 11111000110100000011101010101110
f(R1,K2) = 00111100101010111000011110100011
L3 = R2 = 11001100000000010111011100001001
E(R2) = 111001011000000000000010101110101110100001010011
K3 = 010101011111110010001010010000101100111110011001
E(R2) K3 = 101100000111110010001000111110000010011111001010
S-box outputs 00100111000100001110000101101111
f(R2,K3) = 01001101000101100110111010110000
L4 =R3 = 10100010010111000000101111110100
E(R3) =01010000010000101111100000000101011111111010100
K4 = 011100101010110111010110110110110011010100011101
E(R3) K4 = 001000101110111100101110110111100100101010110100
S-box outputs 00100001111011011001111100111010
f(R3,K4) = 10111011001000110111011101001100
L5 = R4 = 01110111001000100000000001000101
E(R4) = 101110101110100100000100000000000000001000001010
K5 = 011111001110110000000111111010110101001110101000
E(R4) K5 = 110001100000010100000011111010110101000110100010
S-box outputs 01010000110010000011000111101011
f(R4,K5) = 00101000000100111010110111000011
L6 = R5 = 10001010010011111010011000110111
Chng 3: Mt m c in
E(R5) = 110001010100001001011111110100001100000110101111
K6 = 011000111010010100111110010100000111101100101111
E(R5) K6 =101001101110011101100001100000001011101010000000
S-box outputs 01000001111100110100110000111101
f(R5,K6) = 10011110010001011100110100101100
L7 = R6 = 11101001011001111100110101101001
E(R6) = 111101010010101100001111111001011010101101010011
K7 = 111011001000010010110111111101100001100010111100
E(R6) K7 = 000110011010111110111000000100111011001111101111
S- box outputs 00010000011101010100000010101101
f(R6,K7) = 10001100000001010001110000100111
L8 = R7 = 00000110010010101011101000010000
E(R7) = 000000001100001001010101010111110100000010100000
K8 = 111101111000101000111010110000010011101111111011
E(R7) K8 = 111101110100100001101111100111100111101101011011
S-box outputs 01101100000110000111110010101110
f(R7,K8) = 00111100000011101000011011111001
L9 = R8 = 11010101011010010100101110010000
E(R8) = 011010101010101101010010101001010111110010100001
K9 = 111000001101101111101011111011011110011110000001
E(R8) K9 = 100010100111000010111001010010001001101100100000
S-box outputs 00010001000011000101011101110111
f(R8,K9) = 00100010001101100111110001101010
L10 = R9 = 00100100011111001100011001111010
E(R9) = 000100001000001111111001011000001100001111110100
K10 = 101100011111001101000111101110100100011001001111
E(R9) K10 = 101000010111000010111110110110101000010110111011
S-box outputs 11011010000001000101001001110101
f(R9,K10) = 01100010101111001001110000100010
L11 = R10 = 10110111110101011101011110110010
111
112
Gio trnh Mt m hc
E(R10) = 010110101111111010101011111010101111110110100101
K11 = 001000010101111111010011110111101101001110000110
E(R10) K11 = 011110111010000101111000001101000010111000100011
S-box outputs
01110011000001011101000100000001
f(R10,K11) = 11100001000001001111101000000010
L12 = R11 = 11000101011110000011110001111000
E(R11) = 011000001010101111110000000111111000001111110001
K12 = 011101010111000111110101100101000110011111101001
E(R11) K12 = 000101011101101000000101100010111110010000011000
S-box outputs 01110011000001011101000100000001
f(R11,K12) = 11000010011010001100111111101010
L13 = R12 = 01110101101111010001100001011000
E(R12) = 001110101011110111111010100011110000001011110000
K13 = 100101111100010111010001111110101011101001000001
E(R12) K13 = 101011010111100000101011011101011011100010110001
S-box outputs 10011010110100011000101101001111
f(R12,K13) = 11011101101110110010100100100010
L14 = R13 = 00011000110000110001010101011010
E(R13) = 000011110001011000000110100010101010101011110100
K13 = 010111110100001110110111111100101110011100111010
E(R13) K14 = 010100000101010110110001011110000100110111001110
S-box outputs 01100100011110011001101011110001
f(R13,K14) = 10110111001100011000111001010101
L15 = R14 = 11000010100011001001011000001101
E(R14) = 111000000101010001011001010010101100000001011011
K15 = 101111111001000110001101001111010011111100001010
E(R14) K15 = 010111111100010111010100011101111111111101010001
S-box outputs 10110010111010001000110100111100
f(R14,K15) = 01011011100000010010011101101110
R15 = 01000011010000100011001000110100
Chng 3: Mt m c in
113
E(R15) = 001000000110101000000100000110100100000110101000
K16 = 110010110011110110001011000011100001011111110101
E(R15) K16 = 111010110101011110001111000101000101011001011101
S-box outputs 10100111100000110010010000101001
f(R15,K16) = 11001000110000000100111110011000
R16 = 00001010010011001101100110010101
114
Gio trnh Mt m hc
xu bit di 6).
Hai tnh cht khc nhau sau y ca cc hp S c th coi l
c rt ra t tiu chun thit k ca NSA.
- Vi hp S bt k, u vo x bt k v vi
e, f { 0, 1 } : S(x ) S(x 11ef 00 ) .
- Vi hp S bt k, nu c nh mt bit vo v xem xt gi tr
ca mt bit u ra c nh th cc mu vo bit ra ny bng 0 s
xp x bng s mu ra bit bng 1. (Ch rng, nu c nh
gi tr bit vo th nht hoc bit vo th 6 th c 16 mu vo lm
cho mt bit ra c th bng 0 v c 16 mu vo lm cho bit ny
bng 1. Vi cc bit vo t bit th hai n bit th 5 th iu ny
khng cn ng na. Tuy nhin, phn b kt qu vn gn vi
phn b u. Chnh xc hn, vi mt hp S bt k, nu ta c nh
gi tr ca mt bit vo bt k th s mu vo lm cho mt bit ra
c nh no c gi tr 0 (hoc 1) lun nm trong khong t 13
n 19).
Ngi ta khng bit r l liu c cn mt chun thit k no
y hn c dng trong vic xy dng hp S hay khng.
Chng 3: Mt m c in
115
116
Gio trnh Mt m hc
Chng 3: Mt m c in
117
x2
ek
ek
y1
y2
y1
y2
ek
ek
x1
x2
IV = y0
M ha
(Encrypt)
IV = y0
Gii m
(Decrypt)
118
Gio trnh Mt m hc
IV = y0
ek
M ha
(Encrypt)
IV = y0
ek
y1
y2
y1
y2
ek
M ha
(Encrypt)
x2
ek
x1
x2
Chng 3: Mt m c in
119
120
Gio trnh Mt m hc
m y1 , K, y n .
3.9.4.2. M ngun DES (Xem ph lc 3)
Bi tp
1. Thm m thu c bn m sau:
PSZI QIERW RIZIV LEZMRK XS WEC CSY EVI WSVVC
Bit rng y l bn m ca mt Xeda vi kha k cha bit.
Hy dng phng php tm kha vt cn tm c bn r ting
Anh tng ng.
Ghi ch: Phng php tm kha vt cn l phng php th
Chng 3: Mt m c in
121
EMGLOSUDCGDNCUSWYSFHNSFCYKDPUMLWGYICO|
XYSIPJCK
QPKUGKMGOUCGINCGACKSNISACYKZSCKXEOCKSH
YSXCG
OIDPKZCNKSHICGIWYGKKGKGOLDSILKGOIUSIGLED
SPWZU
GFZCCNDGYYSFUSZCNXEOJNCGYEOWEUPXEZGACG
NFGLKNS
ACIGOIYCKXOUOUZCFZCCNDGYYSFEUEKUZCSOCFZ
CCNC
IACZEJNCSHFZEJZEGMXCYHCIUMGKUSY
Ch dn: F s gii m thnh w.
b. H m Vigenre
KCCPKBGUFDPHQTYAVINRRTMVGRKDNBVFETDGIL
TXRGUD
DKOTFMBPVGEGLTGCKQRACQCWDNAWCRXLZAKFTL
EWRPTVC
QKYVXCHKFTPONCQQRHJVAJUWETMCMSPKQDYHJV
DAHCTRL
SVSKCGCZQDZXGSFRLSWCWSJTBHAFSLASPRJAHKJ
RJUMV
122
Gio trnh Mt m hc
GKMITZHFPDLSPZLVLGWTFPLKKEBDPGCEBSHCTJR
WXBAFS
PEZQNRWXCVYCGAONWDDKACKAWBBIKFTLOVKCG
GHJVLNHI
FFSQESVYCLACNVRWBBIREPBBVFEXOSCDYGZWPFD
TKFQLY
CWHJVTNHIQ/BTKH/VNPIST
c. H m Affine
KQEREJEBCPPCJCRKIEACUZBKRVPKRBCIBQCARBJC
VFCUP
KRLOFKPACUZQEPBKRXPEIIEABDKPBCPFCDCCAFIE
ABKP
BCPFEQPKAZBKRHALBKAPCCIBURCCDKDCCJC/DFUI
XPAFF
ERBICZDFKABICBBENEFCUPLCVKABPCYDCCDPKBC
OCPERK
IVKSCPICBRKLJPKABL
d. H m cha xc nh c
BNVSNSIHQCEELSSKKYERIFJKXUMBGVKAMQLJTYA
VFBKVT
DVBPVVRJYYLAOKYMPQSCGDLFSRLLPROYGESEBUU
ALRWXM
MASAZLGLEFJBZAVVPXWI
CGJXASCBYEHOSNMULKCEAHTQ
Chng 3: Mt m c in
123
OKMFLEBKFXLRRFDTZXCIWBJSICBGAWDVYDHAVFJ
XZIBKC
GJIWEAHTTOEWTUHKRQVVRGZBXYIREMMASCSPBN
LHJMBLR
FFJELHWEYLWISTFVVYFJCMHYUYRUFSFMGESIGRL
WALSVVM
NUHSIMYYITCCQPZSICEHBCCMZFEGVJYOCDEMMPG
HVAAUM
ELCMOEHVLTIPSUYILVGFLMVWDVYDBTHFRAYISYS
GKVSUU
HYHGGCKTMBLRX
3. a. C bao nhiu ma trn kh nghch cp 2 2 trn Z26.
b. Gi s p l s nguyn t. Hy chng t s cc ma trn
kh nghch cp 2 2 trn Zp l (p2 1)(p2 p).
Ch dn V p l s nguyn t nn Z p l mt trng. Hy s
124
Gio trnh Mt m hc
l m,1 l m,2
l1,m
K l2,m
+ ( b1,K, b m )
K
.
K l m,m
K
Chng 3: Mt m c in
125
Bn m s l: "CTAROPYGHPRY"
a. Hy m t cch Bob gii m mt bn m (vi m, n bit).
b. Hy gii m bn m sau: (nhn c theo phng php
nu):
MYAMRARUYIQTENCTORAHROYWSOYEOUARRGE
RNOGW
8. Hy chng minh rng php gii m DES c th thc hin
bng cch p dng thut ton m ho DES cho bn r vi bng
kha o ngc.
9. Cho DES(x,K) l php m ho DES ca bn r x vi kha
K. Gi s y = DES ( x, K ) v y ' = DES ( c ( x ) , c ( K ) ) trong c(.) k
hiu l phn b theo cc bit ca bin. Hy chng minh rng
y ' = c ( y ) (tc l nu ly phn b ca bn r v kha th bn m kt
126
Gio trnh Mt m hc
E0 0 1 E0 0 1 F1 0 1 F1 0 1
FE1 FFE1 FF0 EFE0 E
E0 1 FE0 1 FFF 1 0 FF1 0
0 1 E0 0 1 E0 0 1 F1 0 1 F1
1 FFE1 FFE0 EFE0 EFE
1 FE0 1 FE0 0 EF1 0 EF1
128
Gio trnh Mt m hc
129
- H mt McEliece:
H ny da trn l thuyt m i s v vn cn c coi l
an ton. H mt McEliece da trn bi ton gii m cho cc m
tuyn tnh (cng l mt bi ton NP y ). H mt McEliece
c trnh by phn 4.6.
- H mt ElGamal:
H mt ElGamal da trn tnh kh gii ca bi ton
logarithm ri rc trn cc trng hu hn.
- H mt Chor-Rivest:
H mt Chor-Rivest cng c xem nh mt h mt xp ba
l. Tuy nhin n vn c coi l an ton.
- H mt trn cc ng cong Elliptic:
Cc h mt ny l bin tng ca cc h mt khc (chng hn
nh h mt ElGamal), chng lm vic trn cc ng cong Elliptic
ch khng phi l trn cc trng hu hn. H mt ny m bo
mt vi s kha nh hn cc h mt kha cng khai khc.
Mt ch quan trng l mt h mt kha cng khai khng
bao gi c th m bo c mt tuyt i (an ton v iu
kin). S d nh vy v i phng khi nghin cu mt bn m, y
c th m ln lt cc bn tin r bng lut m ho cng khai e k
cho ti khi anh ta tm c bn r duy nht x m bo y = e k (x ) .
Bn r ny chnh l kt qu gii m ca y. Bi vy, ta ch nghin
cu mt v mt tnh ton ca cc h mt ny.
Mt khi nim c ch khi nghin cu h mt kha cng khai
l khi nim v hm ca sp mt chiu. Ta s nh ngha khi
nim ny mt cch khng hnh thc.
130
Gio trnh Mt m hc
Hm m kha cng khai e k ca Bob phi l mt hm d tnh
131
(e , ) = 1 .
(4) S dng thut ton Euclide m rng tnh mt s
nguyn d duy nht, 1 < d < tha mn ed 1(mod ) .
(5) Kha cng khai l cp s (n , e ) . Kha ring b mt l d.
4.2.2. nh ngha
Cc s nguyn d v e trong thut ton to kha RSA c gi
l s m m ho v s m gii m. S n c gi l modulus.
4.2.3. Thut ton 2: M ha cng khai RSA
Tm lc: B m ha mt thng bo m gi cho A bn m
cn gii.
4.2.3.1. M ha
B phi thc hin:
(1) Thu nhn kha cng khai (n , e ) ca A.
(2) Biu din bn tin di dng mt s nguyn m trong
khong [0 , n 1]
(3) Tnh c = m e mod n .
(4) Gi bn m c cho A.
4.2.3.3. Gii m
Khi phc bn r m t c. A phi thc hin php tnh sau
bng cch dng kha ring m = c d mod n
132
Gio trnh Mt m hc
Chng minh hot ng gii m:
V ed 1(mod ) nn lun tn ti mt s nguyn k sao cho
ed = 1 + k . By gi nu
(m , p) = 1
theo nh l Ferma ta
( )
m ed m(mod n ) v bi vy c d m e
m(mod n ) .
4.2.4. V d
4.2.4.1. To kha
A chn cc s nguyn t
p = 2357, q = 2551
v tnh
ri gi c cho A.
133
4.2.4.3. Gii m
gii m bn m c, A tnh:
c d mod n = 3650502 422191 mod 6012707 = 5234673
4.2.4.4. Ch (S m vn nng)
S = BCNN(p 1, q 1) i khi c gi l s m vn nng
ca n, c th c dng thay cho = (p 1)( q 1) khi to kha
RSA. Cn ch rng l c thc s ca . S dng c th
thu c s m gii m d nh hn (lm cho gii m nhanh hn).
Tuy nhin, nu p v q c chn ngu nhin th CLN(p - 1, q - 1)
s kh nh v bi vy v s l cc s c kch thc xp x.
4.3. h mt rabin
134
Gio trnh Mt m hc
(3) Tnh c = m2 mod n.
(4) Gi bn m c cho A.
4.3.2.2. Gii m:
khi phc bn r m t c, A phi thc hin cc bc sau:
Tm 4 cn bc hai ca c mod n l m1, m2, m3 hoc m4.
(1) Thng bo cho ngi gi l mt trong 4 gi tr m1, m2, m3
hoc m4. Bng mt cch no A s quyt nh m l gi tr no.
4.3.3. Ch
Tm cc cn bc 2 ca c mod n , n = p . q khi p q 3(mod 4 ) .
Trong trng hp ny, vic tm 4 cn bc 2 ca c mod n c thc
hin kh n gin nh sau:
(1) S dng thut ton Euclide m rng tm cc s nguyn
a v b tho mn ap + bq = 1 . Ch rng a v b c th c tnh
trong giai on to kha.
(2) Tnh r = c (p+1) / 4 mod p .
(3) Tnh s = c (q +1) / 4 mod q .
(4) Tnh x = (aps + bqr )mod n .
(5) Tnh y = (aps bqr ) mod n .
(6) Bn gi tr cn bc 2 ca c mod n l x, x mod n , y v
y mod n .
4.3.4. V d
4.3.4.1. To kha
A chn cc s nguyn t p = 277 v q = 331. A tnh n = p.q
= 91687. Kha cng khai ca A l 91687. Kha b mt ca A l cp
s (p = 277, q = 331).
135
4.3.4.2. M ha
Gi s rng 6 bit cui cng ca bn tin gc c lp li trc
khi thc hin m ha. Vic thm vo tha ny nhm gip cho
bn gii m nhn bit c bn m ng.
m ho bn tin 10 bit m = 1001111001 , B s lp li 6 bit
cui cng ca m
m 4 = 1100011110 101110
136
Gio trnh Mt m hc
4.4. h mt elgamal
{0 ,1 ,K, p 1}.
(3) Chn s nguyn ngu nhin k, 1 k p 2 .
( )
mod p .
(5) Gi bn m c = ( , ) cho A.
4.4.2.2. Gii m
khi phc bn r m t c, A phi thc hin cc bc sau:
(1) S dng kha ring a tnh p1a mod p
(Ch p1a = a = ak )
137
( )
4.4.3. V d
4.4.3.1. To kha
A chn p = 2357 v mt phn t sinh = 2 ca Z *2357 . A chn
kha b mt a = 1751 v tnh a mod p = 21751 mod 2357 = 1185 .
138
Gio trnh Mt m hc
i 1
aj
j 1
vi i , 2 i n .
vi b i {0 ,1}
bi = 1: C ngha l gi Mi c xp vo ba l.
bi = 0: C ngha l gi Mi khng c xp vo ba l.
4.5.3. Gii bi ton xp ba l trong trng hp dy siu tng
Trong trng hp M = {M1 , M 2 ,K, M n } l mt dy siu tng
th vic tm b = (b1 , b 2 ,K, b n ) tng ng nh bi ton tm biu
din nh phn ca mt s S. Biu din ny s tm c sau ti a
l n bc.
Thut ton gii:
Vo: dy siu tng M = {M1 , M 2 ,K, M n } v mt s nguyn S
l tng ca mt tp con trong M.
139
n
b M
i
=S
i =1
(1) i n
(2) Chng no i 1 hy thc hin
a. Nu S M i th : x i 1 v S S M i ngc li: x i 0
b. i i 1
(3) Return (b)
Nu M khng phi l dy siu tng th li gii ca bi ton
l mt trong 2n phng n c th. y l mt bi ton kh gii nu
n ln.
4.5.4. Thut ton to kha
Tm lc: Mi u lin lc to cho mnh mt kha cng khai
v mt kha b mt tng ng.
Chn mt s nguyn xc nh n c xem l mt tham s
chung ca h thng.
Mi u lin lc phi thc hin cc bc sau:
Kha b mt l (, M, W (M1 , M 2 , K , M n )) .
140
Gio trnh Mt m hc
4.5.5.1. M ha
B phi thc hin cc bc sau:
(1) Nhn kha cng khai ca A: (a1 , a 2 ,K, a n )
(2) Biu th bn tin m nh mt chui nh phn c di n
m = m1 , m 2 ,K, m n .
(3) Tnh s nguyn c = m1a1 + m 2 a 2 + K + m n a n
(4) Gi bn m c cho A.
4.5.5.2. Gii m
khi phc bn r m t c, A phi thc hin cc bc sau:
(1) Tnh d = W 1c mod M
(2) S dng thut gii xp ba l trong trng hp dy siu
tng tm cc s nguyn r1 , r2 ,K, rn , ri {0 ,1} sao cho:
d = r1 M1 + r2 M 2 + K + rn M n
d W -1c W-1
i =1
V 0 d < M , d =
m ia i
m M ( ) mod M
i
i =1
m i M (i ) mod M ,
i =1
bi vy nghim ca bi
141
d = W 1 c mod M = 136
v nhn c 136 = 12 + 17 + 33 + 74
Bi vy
r1 = r2 = r3 = r4 = 1, r5 = r6 = 0 .
Vy bn r m = 101101.
4.6. h mt chor-rivest (cr)
142
Gio trnh Mt m hc
{1, 2 , K , p 1} .
(6) Chn mt s nguyn ngu nhin d, 0 d p h 2
143
p
b) Biu din thng bo nh mt xu bit c di lg
h
p
p!
trong =
.
h h ! (p h )!
nguyn
ny
thnh
mt
vct
nh
phn
i. t l h
ii. For i from 1 to n do:
P i
p i
th t M i 1 1, m m
, l l 1 .
Nu m
l
l
Nu khng th t:
Mi 1 0 CY :
n
= 1
0
0
= 0
l
vi n 0
vi l 1
p 1
c) Tnh c =
Mi ci mod (p h 1) .
i =1
d) Gi bn m c cho A.
4.6.6.2. Gii m
khi phc bn m r m t c, A phi thc hin cc bc
lnh sau:
a) Tnh r = (c hd )mod p h 1 .
b) Tnh u (x ) = g r (x ) mod (x ) .
144
Gio trnh Mt m hc
c) Tnh s(x ) = u(x ) + f (x ) l mt a thc nh chun h trn Z p .
d) Phn tch s(x ) thnh cc nhn t bc nht trn Z p .
s(x ) =
(x + t ) trong t
j
Zp .
j1
(t j ) vi 1 j h .
1
c hd
p 1
M i c i hd
i =0
[g (x )]
p 1
M i a (i ) +d
i =0
[g (x )]
)hd
p 1
M i a (i )
[g (x )]i
mod f (x )
=0
u(x )
[g (x ) ]
p 1
i =0
p 1
(x + (i ))
Mi
Mi
a (i )
p 1
Mi
(x + (i ))
(mod (x ))
i =0
i =0
145
Mi
p 1
(x + (i ))
i =0
Bi vy tt c cc cn bc h ca s(x ) u nm trong Z p v p
dng 1 i vi cc cn ny ta s c cc to ca M l 1.
4.6.3. V d
4.6.3.1. To kha:
A thc hin cc bc sau:
(1) Chn p = 7 v h = 4 .
(2) Chn a thc bt kh quy f (x ) = x 4 + 3x 3 + 5x 2 + 6x + 2 c
bc 4 trn Z 7 . Cc phn t ca trng hu hn F74 c biu din
bng cc a thc trong Z 7 [x ] .
(3) Chn phn t nguyn thy ngu nhin g (x ) = 3x 3 + 3x 2 + 6 .
(4) Tnh cc logarit ri rc sau:
a 0 = log g (x ) (x )
= 1028
a1 = log g (x ) (x + 1) = 1935
a 2 = log g (x ) (x + 2) = 2054
a 3 = log g (x ) (x + 3 ) = 1008
a 4 = log g (x ) (x + 4 ) = 379
a 5 = log g (x ) (x + 5 ) = 1780
a 6 = log g (x ) (x + 6 ) = 223
(2) = 0
(3 ) = 2
(4 ) = 1
(5 ) = 5
(6 ) = 3
146
Gio trnh Mt m hc
(6) Chn s nguyn ngu nhin d = 1702
(7) Tnh:
C 0 = (a 6 + d )mod 2400 = 1925
((C0 , C1 , C2 , C3 , C4 , C5 , C6 ), p = 7 , h = 4 )
Kha b mt ca A l ( f (x ), g (x ), , d ) .
4.6.3.2. M ha
m ha bn tin m = 22 gi cho A, B lm nh sau:
(1) Nhn kha cng khai ca A.
(2) Biu din m nh mt xu bit di 5: m = 1 0 11 0 (Ch
7
rng lg = 5 )
4
147
1 (2) = 3
1 (3 ) = 6
1 (6 ) = 0
148
Gio trnh Mt m hc
149
150
Gio trnh Mt m hc
Hn na nu x C , e (Z 2 )n v r = x + e th H x T = H e T .
Ta coi e l vct sai xut hin trong qu trnh truyn t m
[(d 1) / 2] ).
Cng ging nh bi ton tng tp con, c th ch ra mt
trng hp c bit "d", sau ngy trang sao cho n ging vi
bi ton chung "kh". a ra l thuyt s rt di dng, bi vy
151
ta s ch tm lc cc kt qu y. Mt trng hp kh d c
McEliece ngh l dng mt m trong lp cc m Goppa. Trn
thc t, cc m ny c mt thut ton gii m hu hiu. Hn na
cc, cc m ny rt d to v c mt s lng ln cc m Goppa
tng ng c cng tham s.
Cc tham s ca m Goppa c dng n = 2 m , d = 2t + 1 v
k = n mt . p dng trong thc t cho mt h mt kha cng
152
Gio trnh Mt m hc
V d 1: Ma trn:
1
0
G=
0
0 0 0 1 1 0
1 0 0 1 0 1
0 1 0 0 1 1
0 0 1 1 1 1
1
S=
0
1
0
1
1
0
0 1
0
0 1
v
P
=
1
1 1
0
0 0
0
1 0 0 0 0 0
0 0 1 0 0 0
0 0 0 0 0 1
0 0 0 0 0 0
0 1 0 0 0 0
0 0 0 0 1 0
0 0 0 1 0 0
1
G' =
1
1 1 1 0 0 0
1 0 0 1 0 0
0 0 1 1 0 1
1 0 1 1 1 0
1 1 0 0 1 0 0
+ (0, 0, 0, 0, 1, 0, 0 )
= (1, 1, 0, 1)
1 0 0 1 1 0 1
0 1 0 1 1 1 0
= (0, 1, 1, 0, 0, 1, 0 ) + (0, 0, 0, 0, 1, 0, 0 )
= (0, 1, 1, 0, 1, 1, 0 )
153
1
0
y 1 = y P 1 = (0, 1, 1, 0, 1, 1, 0 ) 0
0
0
0
= (1, 0, 0, 0, 1, 1, 1)
0 0 1 0 0 0
0 0 0 0 0 0
0 0 0 1 0 0
1 0 0 0 0 0
0 0 0 0 0 1
0 0 0 0 1 0
0 1 0 0 0 0
1
1
x = S x0 =
0
1 0 1
1 0 0
(1, 0, 0, 0) = (1, 1, 0, 1)
1 1 1
0 0 1
y chnh l bn r m Alice m.
4.8. cc hm bm v tnh ton vn ca d liu
4.8.1. M u
Cc hm bm ng vai tr c bn trong mt m hin i.
Hm bm s to ra mt u ra t bn tin u vo. u ra ny
c nh ngha l m bm (kt qu bm, gi tr bm).
154
Gio trnh Mt m hc
Ni mt cch chnh xc hn, hm bm h s to ra nh x
155
156
Gio trnh Mt m hc
157
- Kh tm nghch nh th hai
- Kh v chm.
4.8.2.5. Ch v cc thut ng
Kh tm nghch nh Mt chiu.
Kh tm nghch nh th hai Kh va chm yu.
Kh va chm Kh va chm mnh.
OWHF Hm bm mt chiu yu.
CRHF Hm bm mt chiu mnh.
4.8.2.6. V d
r bit kim tra ca mt m xyclic (n , k ) vi k > r c th coi l
mt hm bm tho mn hai tnh cht c bn (d tnh ton v
nn). Tuy nhin n khng tho mn tnh cht kh tm nghch nh
th hai.
4.2.8.7. nh ngha thut ton m xc thc thng bo (MAC)
Thut ton MAC l mt h cc hm h k (c tham s ha
bng mt kha b mt k) c cc tnh cht sau:
(1) D dng tnh ton: Vi h k bit v gi tr k cho trc v
mt u vo x, h k (x ) c th c tnh d dng ( h k (x ) c gi l
gi tr MAC hay MAC).
(2) Nn: h k nh x mt u vo x c di bit hu hn tu
ti mt u ra h k (x ) c di bit n c nh.
(3) Kh tnh ton: Vi cc cp gi tr (x i , h k (x i )) khng c kh
nng tnh mt cp
(x , h k (x ))
h k (x ) = h k (x i ) vi mt i no ).
vi x x i (k c c kh nng
158
Gio trnh Mt m hc
Nu tnh cht c khng tha mn th thut ton c coi l
gi mo MAC.
4.8.2.8. Phn loi cc hm bm mt m v ng dng
Hm bm
Khng c kha
MDC
OWHF
C kha
Cc ng dng khc
Cc ng dng khc
MDC
CRHF
Hnh 4.2
4.8.3. Cc hm bm khng c kha
(Cc hm bm da trn mt m khi).
4.8.3.1. nh ngha 1
Mt m khi (n, r) l mt m khi xc nh mt hm kh
nghch t cc bn r n bit sang cc bn r n bit bng cch s dng
mt kha r bit. Nu E l mt php m ho nh vy th E k (x ) k
hiu cho php m ho x bng kha k.
4.8.3.2. nh ngha 2
Cho h l mt hm bm c lp c xy dng t mt mt m
khi vi hm nn f thc hin s php m ho khi x l tng
khi bn tin n bit. Khi tc ca h l 1/s.
159
4.8.3.3. MDC di n
Ba s di y c lin quan cht ch vi cc hm bm
di n, xy dng trn cc mt m khi. Cc s ny c s dng
cc thnh phn c xc nh trc nh sau:
- Mt mt m khi n bit khi sinh E k c tham s ha bng
mt kha i xng k.
- Mt hm g nh x n bit vo thnh kha k s dng cho E
(Nu cc kha cho E cng c di n th g c th l hm ng nht).
- Mt gi tr ban u c nh IV thch hp dng vi E.
Hi-1
xi
g
Hi-1
xi
Hi
Matyas - Mayer - Oseas
xi
Hi-1
Hi
Davies - Mayer
Hi
Miyaguchi - Preneel
Hnh 4.3
4.8.3.3.1. Thut ton bm Matyas - Mayer - Oseas
Vo: Xu bit x.
Ra : M bm n bit ca x.
(1) u vo x c phn chia thnh cc khi n bit v c
n nu cn thit nhm to khi cui cng hon chnh. Ta c t
khi n bit: x1 x 2 K x t . Phi xc nh trc mt gi tr ban u n
bit (k hiu IV).
160
Gio trnh Mt m hc
(2) u ra l H t c xc nh nh sau:
H 0 = IV, H i = E g (Hi 1 ) (x i ) x i , 1 i t .
161
10
63
xi
int 2
int 3
int 4
D
out 2
out 1
Hi
Hi
Hnh 4.4
Hi-1
162
Gio trnh Mt m hc
~
~
~
~ ~
~
~
H 0 = IV, k i = ~
g H i 1 , C i = E ~ki (x i ) x i , H i = C Li C R
i
int 2
Gi-1
MDC - 2
Hi
int 3
int 1 Gi-1
int 2
Gi-1
MDC - 2
int 4 H i
out 2
out 1
Gi
Gi
Hnh 4.5
163
H i K k (H i 1 x i ); 2 i t.
( )
x2
H1
IV = 0
x3
H2
H3
X
l
thm
K'
K
E
Ht
E
H't
E
Ht