# Is a tweakable block cipher still considered deterministic in nature?

"a block cipher is a deterministic algorithm operating on fixed-length groups of bits, called blocks, with an unvarying transformation that is specified by a symmetric key. - Wikipedia "

But with a native tweak support inside a block cipher, one can achieve "varying" transformation with same symmetric key but different tweak. i.e probabilistic encryption without changing the key or using the block cipher in some mode .

Now is a block cipher with native tweak support still considered a deterministic encryption ? The only determinism being the length of the output (that is same as length of the input).

• The use of the word "deterministic" in "deterministic algorithm" and "deterministic encryption" is not the same here, be careful not to confuse the two. In the first case is just means that given the same plaintext, key, tweak, and anything else that parameterizes the block cipher, you will always get the same ciphertext (which is obviously true), while the latter is about semantic security. So a tweakable block cipher is still "deterministic" but may be used in probabilistic encryption schemes. Are you asking how to generalize the notion of deterministic encryption to tweakable block ciphers? – Thomas Apr 21 '14 at 5:58
• Do we call a symmetric encryption scheme probabilistic only when it is used in some mode, say CBC ? Can it never be natively probabilistic ? – sashank Apr 21 '14 at 6:23

Block cipher takes an input $P$ of fixed length $n$ and transforms it under key $K$ (and possibly under other parameters such as tweak $T$) to output $C$ of the same length $n$: $$E:\; P \xrightarrow{K(,T)} C.$$ It is always deterministic in the sense that $C$ is entirely determined by the listed parameters.
A mode of operation $\Pi$ is used to turn a fixed-length block cipher into a variable-length encryption scheme. To achieve semantic security, modes of operation typically uses deterministic nonces or random initialization vectors. In the latter case the resulting schemes are called probabilistic.