Welcome to the resource topic for
**2020/462**

**Title:**

An Information-Theoretic Proof of the Streaming Switching Lemma for Symmetric Encryption

**Authors:**
Ido Shahaf, Or Ordentlich, Gil Segev

**Abstract:**

Motivated by a fundamental paradigm in cryptography, we consider a recent variant of the classic problem of bounding the distinguishing advantage between a random function and a random permutation. Specifically, we consider the problem of deciding whether a sequence of q values was sampled uniformly with or without replacement from [N], where the decision is made by a streaming algorithm restricted to using at most s bits of internal memory. In this work, the distinguishing advantage of such an algorithm is measured by the KL divergence between the distributions of its output as induced under the two cases. We show that for any s=\Omega( \log N) the distinguishing advantage is upper bounded by O(q\cdot s/N) , and even by O(q\cdot s/N \log N) when q\le N^{1-\epsilon} for any constant \epsilon>0 where it is nearly tight with respect to the KL divergence.

**ePrint:**
https://eprint.iacr.org/2020/462

See all topics related to this paper.

Feel free to post resources that are related to this paper below.

**Example resources include:**
implementations, explanation materials, talks, slides, links to previous discussions on other websites.

For more information, see the rules for Resource Topics .