# Rivest - Time Memory Tradeoff Using Distinguished Points

A while ago, Hellman introduced a time-memory tradeoff for chosen plaintext attack on block ciphers.

There is an innovation due Rivest using a concept of 'distinguished points'. I am looking for the original reference to Rivest's contribution. All references I have found to Rivest point me to the book

D. Denning, Cryptography and Data Security , p. 100, Addison-Wesley, 1982

which gives only a few sentence description of Rivest's idea and no citation to any paper of Rivest on this topic.

• It may be a lost case :Remark: the idea of using distinguished points in Hellman's tradeoff was noted earlier by Rivest [Den82, p.100], although no further reference in public literature is known from On the Time-Memory Tradeoff Between Exhaustive Key Search and Table Precomputation. Maybe Rivest can answer this? – kelalaka May 4 '20 at 16:48
• Oh well... at least the ideas are floating around in other papers – zz7948 May 5 '20 at 6:46