The Ideal-Cipher Model, Revisited: An Uninstantiable Blockcipher-Based Hash Function

John Black

eprint.iacr.org will be offline for approximately an hour for routine maintenance at 11pm UTC on Tuesday, April 16. We lost some data between April 12 and April 14, and some authors have been notified that they need to resubmit their papers.

Paper 2005/210

The Ideal-Cipher Model, Revisited: An Uninstantiable Blockcipher-Based Hash Function

John Black

Abstract

The Ideal-Cipher Model of a blockcipher is a well-known and widely-used model dating back to Shannon and has seen frequent use in proving the security of various cryptographic objects and protocols. But very little discussion has transpired regarding the meaning of proofs conducted in this model or regarding the model's validity. In this paper, we briefly discuss the implications of proofs done in the ideal-cipher model, then show some limitations of the model analogous to recent work regarding the Random-Oracle Model. In particular, we extend work by Canetti, Goldreich and Halevi, and a recent simplification by Maurer, Renner, and Holenstein, to exhibit a blockcipher-based hash function that is provably-secure in the ideal-cipher model but trivially insecure when instantiated by any blockcipher.

Metadata

Available format(s): PDF PS
Category: Foundations
Publication info: Published elsewhere. Unpublished
Keywords: Ideal-Cipher Model Information-Theoretic Cryptography Random-Oracle Model
Contact author(s): jrblack @ cs colorado edu
History: 2005-07-05: received
Short URL: https://ia.cr/2005/210
License: CC BY

BibTeX

@misc{cryptoeprint:2005/210,
      author = {John Black},
      title = {The Ideal-Cipher Model, Revisited: An Uninstantiable Blockcipher-Based Hash Function},
      howpublished = {Cryptology ePrint Archive, Paper 2005/210},
      year = {2005},
      note = {\url{https://eprint.iacr.org/2005/210}},
      url = {https://eprint.iacr.org/2005/210}
}