On the Lai-Massey scheme

Constructing a block cipher requires us to define a random permutation, which is usually performed by the Feistel scheme and its variants. In this paper we investigate the Lai-Massey scheme which was used in IDEA. We show that we cannot use it “as is” in order to obtain results like the Luby-Rackoff theorem. This can however be done by introducing a simple function which has an orthomorphism property. We also show that this design offers nice decorrelation properties, and we propose a block cipher family called Walnut


Publié dans:
International Conference on the Theory and Applications of Cryptology and Information Security, Advances in Cryptology - ASIACRYPT'99, 1716, 8-19
Présenté à:
International Conference on the Theory and Applications of Cryptology and Information Security, Advances in Cryptology - ASIACRYPT'99, Singapore, November 14-18, 1999
Année
1999
Laboratoires:




 Notice créée le 2007-01-18, modifiée le 2018-03-17

n/a:
Télécharger le documentPS
Lien externe:
Télécharger le documentURL
Évaluer ce document:

Rate this document:
1
2
3
 
(Pas encore évalué)