Cascading Four Round LRW1 is Beyond Birthday Bound Secure

Abstract: In CRYPTO’02, Liskov et al. introduced the concept of a tweakable block cipher, a novel symmetric key primitive with promising applications. They put forth two constructions for designing such tweakable block ciphers from conventional block ciphers: LRW1 and LRW2. While subsequent efforts extended LRW2 to achieve security beyond the birthday bound (e.g., cascaded LRW2 in CRYPTO’12 by Landecker et al.), the extension of LRW1 remained unexplored until Bao et al.’s work in EUROCRYPT’20 that considered cascaded LRW1, a one-round extension of LRW1 - entailing masking the LRW1 output with the given tweak and re-encrypting it with the same block cipher. They showed that CLRW1 offers security up to 22n/3 queries. However, this result was challenged by Khairallah’s recent birthday bound distinguishing attack on cascaded LRW1, effectively refuting the security claim of Bao et al. Consequently, a pertinent research question emerges: How many rounds of cascaded LRW1 are required to obtain secu.... https://tosc.iacr.org/index.php/ToSC/article/view/11293

Object Details

• Location: Deutsche Nationalbibliothek Frankfurt am Main
• Extent: Online-Ressource
• Language: Englisch

References and Relationships

• Bibliographic citation: Cascading Four Round LRW1 is Beyond Birthday Bound Secure ; volume:2023 ; number:4 ; year:2023 ; IACR transactions on symmetric cryptology ; 2023, Heft 4 (2023)

Contributors, Places and Time

• Creator: Datta, Nilanjan ; Dey, Shreya ; Dutta, Avijit ; Mandal, Sougata

Further information

• DOI: 10.46586/tosc.v2023.i4.365-390
• URN: urn:nbn:de:101:1-2023122717543734618862
• Rights: Open Access; Der Zugriff auf das Objekt ist unbeschränkt möglich.
• Last update: 15.08.2025, 7:37 AM CEST