Differential and Linear Cryptanalysis of AC Block Cipher
AC分组密码的差分和线性密码分析

The security of AC against differential and linear cryptanalysis is discussed in this paper. It is shown that 12-round AC has no differential characteristic with probability higher than 2-128 and no linear approximations with approximation bias larger than 2-67 by estimating the lower bound of the number of active-boxes in 3-round differential characteristic and 12-round linear approximation. Hence, AC is secure to differential and linear cryptanalysis.