Skip to main content
Cryptography

Return to Answer

polish
Source Link
fgrieu ♦
fgrieu ♦
  • 145.5k
  • 12
  • 319
  • 611

Yes, in BPS, if the internal function $F$ is a block cipher, then $f$ is its block width, thus 128 for AES (for all key width variants). That's clear enough in the paragraph quoted in the question:

We denote by $f$ the number of output bits of the internal function $F$. (...) If $F$ is a $f$-bit block cipher (...) We denote by $F_K(x)$ the application of the block cipher $E$ with the key $K$ on the plaintext $x$ ($F_K(x)=E_K(x)$), (...)

Yes, in BPS, if $F$ is a block cipher, then $f$ is its block width, thus 128 for AES (for all key width variants). That's clear enough in the paragraph quoted in the question:

We denote by $f$ the number of output bits of the internal function $F$. (...) If $F$ is a $f$-bit block cipher (...) We denote by $F_K(x)$ the application of the block cipher $E$ with the key $K$ on the plaintext $x$ ($F_K(x)=E_K(x)$), (...)

Yes, in BPS, if the internal function $F$ is a block cipher, then $f$ is its block width, thus 128 for AES (for all key width variants). That's clear enough in the paragraph quoted in the question:

We denote by $f$ the number of output bits of the internal function $F$. (...) If $F$ is a $f$-bit block cipher (...) We denote by $F_K(x)$ the application of the block cipher $E$ with the key $K$ on the plaintext $x$ ($F_K(x)=E_K(x)$), (...)

Source Link
fgrieu ♦
fgrieu ♦
  • 145.5k
  • 12
  • 319
  • 611

Yes, in BPS, if $F$ is a block cipher, then $f$ is its block width, thus 128 for AES (for all key width variants). That's clear enough in the paragraph quoted in the question:

We denote by $f$ the number of output bits of the internal function $F$. (...) If $F$ is a $f$-bit block cipher (...) We denote by $F_K(x)$ the application of the block cipher $E$ with the key $K$ on the plaintext $x$ ($F_K(x)=E_K(x)$), (...)