3 ms·
Not if E is ideal. The point is that an ideal block cipher is not vulnerable to related key attacks. It should be indistinguishable from a random permutation. S
by mgraczyk 12y ago
Not if E is ideal. The point is that an ideal block cipher is not vulnerable to related key attacks. It should be indistinguishable from a random permutation. Selected uniformly from S_n, where n is the cardinality of the key space.
- pdf_reader 12y agoFrom what is on the slide, I can compute (x', E_{k'}(x')) for x' and k' of my choosing by just running the encryption algorithm. (I know that ideal ciphers are defined correctly elsewhere, and agree that their definition makes sense.)