Revisiting Cascade Ciphers in Indifferentiability Setting

Chun Guo; Dongdai Lin; Meicheng Liu

Paper 2016/825

Revisiting Cascade Ciphers in Indifferentiability Setting

Chun Guo, Dongdai Lin, and Meicheng Liu

Abstract

Shannon defined an ideal $(κ, n)$ -blockcipher as a secrecy system consisting of $2^{κ}$ independent $n$ -bit random permutations. In this paper, we revisit the following question: in the ideal cipher model, can a cascade of several ideal $(κ, n)$ -blockciphers realize an ideal $(2 κ, n)$ -blockcipher? The motivation goes back to Shannon's theory on product secrecy systems, and similar question was considered by Even and Goldreich (CRYPTO '83) in different settings. We give the first positive answer: for the cascade of independent ideal -blockciphers with two alternated independent keys, four stages are necessary and sufficient to realize an ideal -blockcipher, in the sense of indifferentiability of Maurer et al. (TCC 2004). This shows cascade capable of achieving key-length extension in the settings where keys are \emph{not necessarily secret}.

Metadata

Available format(s): PDF
Publication info: Preprint. MINOR revision.
Keywords: blockcipher cascade ideal cipher indifferentiability.
Contact author(s): guochun @ iie ac cn
History: 2017-05-23: revised; 2016-08-30: received; See all versions
Short URL: https://ia.cr/2016/825
License: CC BY

BibTeX

@misc{cryptoeprint:2016/825,
      author = {Chun Guo and Dongdai Lin and Meicheng Liu},
      title = {Revisiting Cascade Ciphers in Indifferentiability Setting},
      howpublished = {Cryptology {ePrint} Archive, Paper 2016/825},
      year = {2016},
      url = {https://eprint.iacr.org/2016/825}
}