Give a 256 bit key space and 128 message space would AES block cipher as the encryption scheme be CPA secure?
$\begingroup$
$\endgroup$
2
-
3$\begingroup$ AES is just a primitive. You should describe how you use it to build an actual encryption scheme. And how do you use the IV? $\endgroup$– CodesInChaosCommented Nov 26, 2012 at 21:33
-
1$\begingroup$ @CodesInChaos Reading this back (a comment pointed to it) I think the AES block cipher is an encryption scheme. One that only accepts 128 bit messages, but that seems to be the defined message space in the question. $\endgroup$– Maarten Bodewes ♦Commented Jul 15, 2014 at 20:41
Add a comment
|
2 Answers
$\begingroup$
$\endgroup$
1
You are mistaken about what an encryption scheme is. As CodeInChaos pointed out AES is a primitive and we assume that it is a preudo random permutation. That is an assumption since the way AES is built means that we won't be able to formally prove that it is one. With that PRP we try to build modes of encryption that might or might not be CPA-secure I encourage you to read Mihir Bellare course notes and especially the chapters about Symmetric encryption and pseudo random functions http://cseweb.ucsd.edu/~mihir/cse207/
answered Nov 27, 2012 at 10:41
-
2$\begingroup$ AES is also an encryption scheme is you consider it as a way to encrypt 128 bits blocks $\endgroup$ Commented Sep 23, 2016 at 21:06
$\begingroup$
$\endgroup$
1
Using AES with a random oracle IV as in CBC mode or using a unique nonce as in CTR constrction will result in a CPA secure construction. You cannot play with the size of the key. The key is strictly defined in each mode.
-
$\begingroup$ How do you prove AES-CTR is IND-CPA with a unique nonce? $\endgroup$– CykerCommented May 17, 2020 at 1:46