2 ms·
The two models are equivalent, in fact: http://eprint.iacr.org/2008/246 http://eprint.iacr.org/2008/246 This of course says nothing about how to go about build
by pbsd 15y ago
The two models are equivalent, in fact: http://eprint.iacr.org/2008/246 http://eprint.iacr.org/2008/246
This of course says nothing about how to go about building an actual cipher/hash that withstands all kinds of cryptanalysis.
Edit: apparently not so clear, I'm told: http://arxiv.org/abs/1011.1264 http://arxiv.org/abs/1011.1264
- davidcash 15y agoA better interpretation of that paper is that it is giving an upper [edit: upper bound] on how inequivalent the models are. Also, that paper was subsequently shown to be fatally flawed. http://arxiv.org/abs/1011.1264 http://arxiv.org/abs/1011.1264 Anyway, yeah, a theoretical diversion.