Paper 2015/134 Original: eprint.iacr.org/2015/134 ↗
From Related-Key Distinguishers to Related-Key-Recovery on Even-Mansour Constructions
Abstract
We show that a distinguishing attack in the related key model on an Even-Mansour block cipher can readily be converted into an extremely efficient key recovery attack. Concerned ciphers include in particular all iterated Even-Mansour schemes with independent keys. We apply this observation to the Caesar candidate Prøst-OTR and are able to recover the whole key with a number of requests linear in its size. This improves on recent forgery attacks in a similar setting.
Metadata
- Available format(s)
PDF- Category
- Secret-key cryptography
- Publication info
- Preprint.
- History
- 2016-01-29: last updated
- 2015-02-26: published
- Short URL
- https://ia.cr/2015/134
- License
- https://creativecommons.org/licenses/by/4.0/
BibTeX
@misc{cryptoeprint:2015/134,
author = {Pierre Karpman},
title = {From Related-Key Distinguishers to Related-Key-Recovery on Even-Mansour Constructions},
howpublished = {Cryptology {ePrint} Archive, Paper 2015/134},
year = {2015},
url = {https://eprint.iacr.org/2015/134}
}