3 ms·
Now I am genuinely curious: at what point did the standard game definitions of security become widespread/presented? Because given those it is obvious that CTR
by wbl 13y ago
Now I am genuinely curious: at what point did the standard game definitions of security become widespread/presented? Because given those it is obvious that CTR is secure given a PRP, which any block cipher should be to be semantically secure when encrypting a single block.
- marshray 13y agoMy impression is that it was NSA/NIST's AES specification process that made it "officially OK" to stop worrying about known plaintext. But really we need to ask some the folks older than I am. It would be a good question for the randombit or metzdowd crypography lists. Also, I'll tweet at Bellovin. Edit: https://twitter.com/marshray/status/376600321637638144 https://twitter.com/marshray/status/376600321637638144