4
$\begingroup$

I've come across a form of cryptographic security that I've never heard of: entropic security. I've read the Russel et al abstract and that doesn't seem to bear much relation to the wiki article.

Things that confuse me are like:-

"Deterministic encryption" :A deterministic encryption scheme (as opposed to a probabilistic encryption scheme) is a cryptosystem which always produces the same ciphertext for a given plaintext and key, even over separate executions of the encryption algorithm.

That mode seems highly redundant as any 'proper' scheme would produce new cipher texts for repetitions of the same message (replay attack vs IVs?).

So what's entropic security for dummies, and how does the above fit in? I realise that Wikipedia is not the font of all knowledge.

Improve this question
$\endgroup$
2
  • 2
    $\begingroup$ You're asking two questions at once. There are a number of answers here which explain what deterministic encryption is, and it's not a bad thing anymore than a block cipher is a bad thing. Also, it's not just you. That Wikipedia article is awful and is very confusing. $\endgroup$
    – forest ♦
    Mar 26, 2022 at 1:44
  • $\begingroup$ Yevgeniy Dodis and Adam Smith's Entropic Security and the Encryption of High Entropy Messages seems to contain all the necessary information. This comment is not a proper answer, and one I drafted was worse than nothing, so I'll leave this to others. $\endgroup$
    – fgrieu ♦
    Mar 26, 2022 at 16:37

0

Reset to default

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.