A while ago, Hellman introduced a time-memory tradeoff for chosen plaintext attack on block ciphers.

There is an innovation due Rivest using a concept of 'distinguished points'. I am looking for the original reference to Rivest's contribution. All references I have found to Rivest point me to the book

D. Denning, Cryptography and Data Security , p. 100, Addison-Wesley, 1982

which gives only a few sentence description of Rivest's idea and no citation to any paper of Rivest on this topic.

  • $\begingroup$ It may be a lost case :Remark: the idea of using distinguished points in Hellman's tradeoff was noted earlier by Rivest [Den82, p.100], although no further reference in public literature is known from On the Time-Memory Tradeoff Between Exhaustive Key Search and Table Precomputation. Maybe Rivest can answer this? $\endgroup$ – kelalaka May 4 '20 at 16:48
  • $\begingroup$ Oh well... at least the ideas are floating around in other papers $\endgroup$ – zz7948 May 5 '20 at 6:46

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.