Equivalence of the Random Oracle Model and the Ideal Cipher Model, Revisited · HackerPapers discussions

Equivalence of the Random Oracle Model and the Ideal Cipher Model, Revisited — mentioned by davidcash

Mon, 19 Mar 2012 20:30:31 GMT

A better interpretation of that paper is that it is giving an upper [edit: upper bound] on how inequivalent the models are. Also, that paper was subsequently shown to be fatally flawed. http://arxiv.org/abs/1011.1264 Anyway, yeah, a theoretical diversion.

Paper and discussion history. A mention is not an endorsement.

Equivalence of the Random Oracle Model and the Ideal Cipher Model, Revisited — mentioned by pbsd

Mon, 19 Mar 2012 20:25:46 GMT

The two models are equivalent, in fact: http://eprint.iacr.org/2008/246 This of course says nothing about how to go about building an actual cipher/hash that withstands all kinds of cryptanalysis. Edit: apparently not so clear, I'm told: http://arxiv.org/abs/1011.1264

Paper and discussion history. A mention is not an endorsement.