Skip to main content

Timeline for Definition of a distinguisher

Current License: CC BY-SA 3.0

3 events
when toggle format what by license comment
Sep 29, 2017 at 18:49 comment added Luis Casillas @theQman: Huh, looking at my 2nd Edition copy I can't find a definition of the range of a distinguisher either, at least not in the vicinity. But note that $D(r) = 1$ and $D(G(s)) = 1$ are truth-valued functions of $r$ and $s$ respectively, so whatever the range of $D$, the definition is implicitly injecting it into a two-element set.
Sep 29, 2017 at 1:14 comment added theQman This clarifies things a bit, but to try to clarify my confusion a bit: Katz and Lindell don't actually specify what the range of a distinguisher is, do they? The above definition allows us to conclude that the value $1$ should be in the range, but as to what $D$ does when it doesn't output $1$, well that doesn't really matter? A perfectly valid distinguisher can output $1$ when it wants to indicate "RANDOM!" and $19283498$ otherwise?
Sep 28, 2017 at 22:29 history answered Luis Casillas CC BY-SA 3.0