|
In cryptography, nothing up my sleeve numbers are any numbers which, by their construction, are above suspicion of hidden properties. They are used in creating cryptographic functions such as hashes and ciphers. These algorithms often need randomized constants for mixing or initialization purposes. The cryptographer may wish to pick these values in a way that demonstrates the constants were not selected for a nefarious purpose, for example, to create a backdoor to the algorithm.〔 These fears can be allayed by using numbers created in a way that leaves little room for adjustment. An example would be the use of initial digits from the number π as the constants.〔 Using digits of π millions of places into its definition would not be considered as trustworthy because the algorithm designer might have selected that starting point because it created a secret weakness the designer could later exploit. Digits in the positional representations of real numbers such as π, ''e'', and irrational roots are believed to appear with equal frequency (see normal number). Such numbers can be viewed as the opposite extreme of Chaitin–Kolmogorov random numbers in that they appear random but have very low information entropy. Their use is motivated by early controversy over the U.S. Government's 1975 Data Encryption Standard, which came under criticism because no explanation was supplied for the constants used in its S-box (though they were later found to have been carefully selected to protect against the then-classified technique of differential cryptanalysis).〔Bruce Schneier. ''Applied Cryptography'', second edition, John Wiley and Sons, 1996, p. 278.〕 Thus a need was felt for a more transparent way to generate constants used in cryptography. “Nothing up my sleeve” is a phrase associated with magicians, who sometimes preface a magic trick by holding open their sleeves to show they have no objects hidden inside.〔(TV Tropes entry for "nothing up my sleeve" )〕 ==Examples== * Ron Rivest used the trigonometric sine function to generate constants for the widely used MD5 hash.〔RFC 1321 Sec. 3.4〕 * The U.S. National Security Agency used the square roots of small integers to produce the constants used in its "Secure Hash Algorithm" SHA-1. The SHA-2 functions use the square roots and cube roots of small primes.〔(FIPS 180-2: Secure Hash Standard (SHS) ) (PDF, 236 kB) – Current version of the Secure Hash Standard (SHA-1, SHA-224, SHA-256, SHA-384, and SHA-512), 1 August 2002, amended 25 February 2004〕 * The Blowfish encryption algorithm uses the binary representation of to initialize its key schedule.〔(Blowfish Paper )〕 * RFC 3526 describes prime numbers for internet key exchange that are also generated from . * The S-box of the NewDES cipher is derived from the United States Declaration of Independence.〔(Revision of NEWDES, Robert Scott, 1996 )〕 * The AES candidate DFC derives all of its arbitrary constants, including all entries of the S-box, from the binary expansion of . * The ARIA key schedule uses the binary expansion of 1/. * The key schedule of the RC5 cipher uses binary digits from both and the golden ratio. * The BLAKE hash function, a finalist in the SHA-3 competition, uses a table of 16 constant words which are the leading 512 or 1024 bits of the fractional part of . * The key schedule of the KASUMI cipher uses 0x123456789ABCDEFFEDCBA9876543210 to derive the modified key. * The SHA-1 hash algorithm uses 0123456789ABCDEFFEDCBA9876543210F0E1D2C3 as its initial hash value. 抄文引用元・出典: フリー百科事典『 ウィキペディア（Wikipedia）』 ■ウィキペディアで「nothing up my sleeve number」の詳細全文を読む スポンサード リンク
|