Skip to main content
Tweeted twitter.com/StackCrypto/status/938092810527559682
edited tags
Link
otus
  • 32.4k
  • 5
  • 73
  • 167
Source Link
Melab
  • 3.7k
  • 3
  • 23
  • 47

What is the "standard model" for block ciphers?

In this paper and this the authors speak of a "standard model". What is the "standard model"? How does it differ from the "ideal model"? Why does the decision to use it or the "ideal model" impact the security bounds of their schemes?