Let $E$ be a block cipher that has block size and key size both equal to 64 bits. Let $E'$ be a block cipher that has 64-bit block size and is defined as follows:

For a 128 bits key $K \mathbin\Vert K'$ where $K$ and $K'$ are of 64 bits and a given 64-bit plaintext block $P$, we defined

$$E'_{(K,K')}(P)=E_K(P) \oplus K'$$

Suppose I can perform a brute force attack on $E$ to recover the key in a known plaintext attack. Can I recover the corresponding encryption key if I have access to more than one plaintext/ciphertext pair for $E'$? Why?

  • $\begingroup$ I guess my goal is to obtain E(P), and get K via E(P). But I have difficulty in getting E(P). What should I do? Could you give me some hints? $\endgroup$ – KengoTokukawa Dec 8 '17 at 16:03
  • $\begingroup$ Hint: Think about what "a brute force attack on $E$" actually involves. If you can do that, what else could you do? $\endgroup$ – Ilmari Karonen Dec 9 '17 at 2:51

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Browse other questions tagged or ask your own question.