3 votes

Info AES cryptanalysis

There are many resources, including here on attacks on AES, which is a vast subject. Here are some pointers. Summary: There are no noteworthy attacks on the full AES. Some attacks with gain over brute ...
  • 17.6k
2 votes

What is the standard checklist for designing a Key Derivation Function?

By definition, one-time pad key must be truly random, not derived by function. So if you have 1MB of truly random data, you do not need KDF function to derive key. And if yo do nout have 1MB of truly ...
1 vote

Statistical closeness of distributions and time-unbounded distinguisher

Since we are considering cryptography, we can assume that we have two distributions $p$ and $q$ which are supported on a finite set, say $[n]=\{1,\ldots,n\}.$ Typically $n=2^b$ where $b$ is a ...
  • 17.6k

Only top scored, non community-wiki answers of a minimum length are eligible