A Theoretical Treatment of Related-Key Attacks: RKA-PRPs, RKA-PRFs, and Applications

ded abstract of this paper appears in Advances in Cryptology – EUROCRYPT ’03, Lecture Notes in Computer Science Vol. 2656, E. Biham ed., Springer-Verlag, 2003. This is the full version. A Theoretical Treatment of Related-Key Attacks: RKA-PRPs, RKA-PRFs, and Applications Mihir Bellare∗ Tadayoshi Kohno† March 18, 2003 We initiate a theoretical investigation of the popular block-cipher design-goal of security against “related-key attacks” (RKAs). We begin by introducing definitions for the concepts of PRPs and PRFs secure against classes of RKAs, each such class being specified by an associated set of “related-key deriving (RKD) functions.” Then for some such classes of attacks, we prove impossibility results, showing that no block-cipher can resist these attacks while, for other, related classes of attacks that include popular targets in the block cipher community, we prove possibility results that provide theoretical support for the view that security against them is ...

• Type: Conference
• Year: 2003
• Where: EUROCRYPT
• Authors: Mihir Bellare, Tadayoshi Kohno
• Keywords: Block Cipher, Cryptography, EUROCRYPT 2003, Related-key Attacks, Tadayoshi Kohno March