Advertisement

Limitations of the Even-Mansour construction

  • Joan Daemen
Conference paper
Part of the Lecture Notes in Computer Science book series (LNCS, volume 739)

Abstract

In [1] a construction of a block cipher from a single pseudorandom permutation is proposed. In a complexity theoretical setting they prove that this scheme is secure against a polynomially bounded adversary. In this paper it is shown that this construction suffers from severe limitations that are immediately apparent if differential cryptanalysis [3] is performed. The fact that these limitations do not contradict the theoretical results obtained in [1] leads the authors to question the relevance of computational complexity theory in practical conventional cryptography.

Preview

Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

References

  1. [1]
    S. Even, Y. Mansour, A Construction of a Cipher From a Single Pseudorandom Permutation, Lecture Notes in Computer Science, Proceedings Asiacrypt '91, Springer-Verlag 1992.Google Scholar
  2. [2]
    J. Daemen, A Framework for the Design if One-Way Hash Functions Including Cryptanalysis of Damgård's One-Way Function Based on a Cellular Automaton, Lecture Notes in Computer Science, Proceedings Asiacrypt '91, Springer-Verlag 1992.Google Scholar
  3. [3]
    E. Biham, A. Shamir, Differential Cryptanalysis of DES-like Cryptosystems, Abstracts of Crypto '90, 1–32.Google Scholar
  4. [4]
    M. Luby and C. Rackoff. How to construct pseudorandom permutations from pseudorandom functions. SIAM Journal on Computing, 17(2):373–386,April 1988.CrossRefGoogle Scholar
  5. [5]
    O. Goldreich, S. Goldwasser and S. Micali, How to Construct Random Functions, Proceedings of the 25th Annual Symposium on Foundations of Computer Science, October 24–26, 1984.Google Scholar

Copyright information

© Springer-Verlag Berlin Heidelberg 1993

Authors and Affiliations

  • Joan Daemen
    • 1
  1. 1.Laboratorium ESATKatholieke Universiteit LeuvenHeverleeBelgium

Personalised recommendations