The best existing bounds on the concrete security of key-alternating ciphers (Chen and
Steinberger, EUROCRYPT'14) are only asymptotically tight, and the quantitative gap with …

Abstract An Ideal Cipher (IC) is a cipher where each key defines a random permutation on
the domain. Ideal Cipher on a group has many attractive applications, eg, the Encrypted Key …

OPAQUE [Jarecki et al., Eurocrypt 2018] is an asymmetric password authenticated key
exchange (aPAKE) protocol that is being developed as an Internet standard and for use …

The r-round (iterated) Even-Mansour cipher (also known as key-alternating cipher) defines a
block cipher from r fixed public n-bit permutations P 1,…, P r as follows: given a sequence of …

We study how to construct efficient tweakable block ciphers in the Random Permutation
model, where all parties have access to public random permutation oracles. We propose a …

The random-permutation model (RPM) and the ideal-cipher model (ICM) are idealized
models that offer a simple and intuitive way to assess the conjectured standard-model …

Abstract The iterated Even-Mansour cipher is a construction of a block cipher from r public
permutations P_1, ..., P_r which abstracts in a generic way the structure of key-alternating …

Abstract In Crypto'21 Gu, Jarecki, and Krawczyk showed an asymmetric password
authenticated key exchange protocol (aPAKE) whose computational cost matches …

We prove that a balanced 8-round Feistel network is indifferentiable from a random
permutation, improving on previous 10-round results by Dachman-Soled et al. and Dai et al …

We continue the study of t-wise independence of substitution-permutation networks (SPNs)
initiated by the recent work of Liu, Tessaro, and Vaikuntanathan (CRYPTO 2021). Our key …