Suppose you have a cryptographic permutation consisting of identical rounds, that makes it vulnerable to a slide attack. But if you sandwich it between two XORs of key material. Is it still vulnerable?

Even-Mansour block cipher construction works on such a principle although it says nothing about a permutation with identical rounds.

What is the reason for why AES and most other block ciphers employ a key schedule instead of an Even-Mansour construction?

  • $\begingroup$ Are you suggesting a cipher combining a 256 bit key Even-Mansour using as permutation AES with all round keys at zero ? $\endgroup$
    – Ruggero
    Sep 3 '19 at 10:56
  • $\begingroup$ Yes. Though it does not have to be 256 bits, 128 also suffices. According to later proof that the same key can be used to whiten and apply post with no loss of security. $\endgroup$
    – user71538
    Sep 3 '19 at 20:16
  • $\begingroup$ This seems to be a duplicate of crypto.stackexchange.com/questions/30221/… $\endgroup$ Sep 5 '19 at 7:55

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy