A Theoretical Treatment of Related-Key Attacks: RKA-PRPs, RKA-PRFs, and Applications

14 years 4 months ago

Download www.cs.washington.edu

ded abstract of this paper appears in Advances in Cryptology – EUROCRYPT ’03, Lecture Notes in Computer Science Vol. 2656, E. Biham ed., Springer-Verlag, 2003. This is the full version. A Theoretical Treatment of Related-Key Attacks: RKA-PRPs, RKA-PRFs, and Applications Mihir Bellare∗ Tadayoshi Kohno† March 18, 2003 We initiate a theoretical investigation of the popular block-cipher design-goal of security against “related-key attacks” (RKAs). We begin by introducing deﬁnitions for the concepts of PRPs and PRFs secure against classes of RKAs, each such class being speciﬁed by an associated set of “related-key deriving (RKD) functions.” Then for some such classes of attacks, we prove impossibility results, showing that no block-cipher can resist these attacks while, for other, related classes of attacks that include popular targets in the block cipher community, we prove possibility results that provide theoretical support for the view that security against them is ...

Mihir Bellare, Tadayoshi Kohno

Real-time Traffic