Universal tweakable Even-Mansour cipher and its applications  

作　　者：Ping ZHANG 

机构地区：[1]School of Computer Science,Nanjing University of Posts and Telecommunications,Nanjing 210023,China

出　　处：《Frontiers of Computer Science》2023年第4期181-192,共12页中国计算机科学前沿（英文版）

基　　金：supported by the National Key Research and Development Program of China(2019YFB2101704);National Natural Science Foundation of China(Grant Nos.61902195 and 62102196);NUPTSF(NY219131).

摘　　要：The construction of the tweakable Even-Mansour cipher is in fact the designs of permutations,mask operations,and masking functions.For information-theoretic security,permutations are usually taken as random permutations.This paper focuses on the mask operations and masking functions to construct a universal tweakable Even-Mansour cipher.Firstly,we describe a formal definition of a universal masking function and provide a universal tweakable Even-Mansour cipher UTEM.In the random permutation model,we prove that UTEM is multi-key secure by H-coefficients technique.Then we show some efficient instantiations of the universal masking function to concertize UTEM.Finally,we apply UTEM to an encryption mode TIE(tweak incrementation encryption)and an authenticated encryption mode IAPM(integrity aware parallelizable mode),present two new schemes TIE-plus and IAPM-plus,and prove their security.UTEM enriches tweakable blockciphers,brings more research topics,and plays an important role in modes of operation,which will be of great significance.

关 键 词：tweakable Even-Mansour cipher masking function multi-key security H-coefficients technique ENCRYPTION authenticated encryption 

分 类 号：TN918.1[电子电信—通信与信息系统]