How to Enrich the Message Space of a Cipher

  • Authors:
  • Thomas Ristenpart;Phillip Rogaway

  • Affiliations:
  • Dept. of Computer Science & Engineering, University of California San Diego, La Jolla, CA;Dept. of Computer Science, University of California Davis, Davis, CA

  • Venue:
  • FSE'07 Proceedings of the 14th international conference on Fast Software Encryption
  • Year:
  • 2007

Quantified Score

Hi-index 0.00

Visualization

Abstract

Given (deterministic) ciphers ε and E that can enciphermessages of l and n bits, respectively, we construct a cipher ε* = XLS[ε,E] that can encipher messages of l + s bits for any s . Enciphering such a string will take one call to E and two calls to E. We prove that ε is a strong pseudorandom permutation as long as ε and E are. Our construction works even in the tweakable and VIL (variable-input-length) settings. It makes use of a multipermutation (a pair of orthogonal Latin squares), a combinatorial object not previously used to get a provablesecurity result.