The sum of PRPs is a secure PRF

  • Authors:
  • Stefan Lucks

  • Affiliations:
  • Theoretische Informatik, Universität Mannheim, Mannheim, Germany

  • Venue:
  • EUROCRYPT'00 Proceedings of the 19th international conference on Theory and application of cryptographic techniques
  • Year:
  • 2000

Quantified Score

Hi-index 0.00

Visualization

Abstract

Given d independent pseudorandom permutations (PRPs) πi, ..., πd over {0; 1}n, it appears natural to define a pseudorandom function (PRF) by adding (or XORing) the permutation results: sumd(x) = π1(x) ⊕...⊕πd(x). This paper investigates the security of sumd and also considers a variant that only uses one single PRP over {0; 1}n.