Block Cipher Modes of Operation and Provable Security (Abstract of Invited Talk)

摘要

Block ciphers have wide applications, including encryption modes, MACs (message authentication codes), authenticated encryption schemes, and hash functions. To obtain these functionalities, a block cipher is used in a mode of operation. Following the analyses of CBC MAC [2] and basic encryption modes [1], provable security (or reduction-based security) is the main security goal for block cipher modes of operation. A provable security result gives strong confidence about the security of block cipher modes, since it guarantees for any adversary with given resources the mode cannot be broken as long as the underlying block cipher remains secure. This in turn implies that to assess the overall security of the mode, one can focus on the analysis of the underlying block cipher.