Skip to main content
10 events
when toggle format what by license comment
Feb 21, 2019 at 12:04 comment added Aleph The Kaliski et. al. paper is from 1985, since then other results have appeared which are not consistent with the hypothesis that DES acts like a set of randomly chosen permutations (think LC). Sure, DES is not a "pure cipher", but that doesn't imply that it "acts like a set of randomly chosen permutations". I don't really understand how the Kaliski et. al. article illustrates what you're trying to say, since they show that DES does not have some specific properties (so you can't use those for distinguishing).
Feb 21, 2019 at 9:20 comment added kelalaka Thanks. Kaliski at al claim that: Except for the weak key experiment, our results are consistent with the hypothesis that DES acts like a set of randomly chosen permutations. In particular, our results show with overwhelming confidence that DES is not pure.
Feb 21, 2019 at 9:19 history edited kelalaka CC BY-SA 4.0
polish
Feb 20, 2019 at 23:15 comment added Aleph To be fair, no concrete cipher with short key can correctly "model" an ideal cipher in arbitrary theoretical constructions. The Biryukov et. al. paper you link to shows a problem with using AES in Davies-Meyer -- and while the abstract says what you wrote, what they really mean is something like "theoretical constructions used in practice". I would suggest a reference to the (not related key) biclique attack here. (I think that would illustrate your point better. Also, DES doesn't act like a set of randomly chosen permutations.)
Feb 20, 2019 at 21:12 history edited kelalaka CC BY-SA 4.0
polish
Feb 20, 2019 at 18:11 history edited kelalaka CC BY-SA 4.0
polish
Feb 20, 2019 at 17:31 history edited kelalaka CC BY-SA 4.0
polish
Feb 20, 2019 at 17:23 history edited kelalaka CC BY-SA 4.0
polish
Feb 20, 2019 at 17:15 history edited kelalaka CC BY-SA 4.0
Added DES random permutation
Feb 20, 2019 at 16:47 history answered kelalaka CC BY-SA 4.0