[Resource Topic] 2024/1864: Tweakable ForkCipher from Ideal Block Cipher

Welcome to the resource topic for 2024/1864

Title:
Tweakable ForkCipher from Ideal Block Cipher

Authors: Sougata Mandal

Abstract:

In ASIACRYPT 2019, Andreeva et al. introduced a new symmetric key primitive called the \textit{forkcipher}, designed for lightweight applications handling short messages. A forkcipher is a keyed function with a public tweak, featuring fixed-length input and fixed-length (expanding) output. They also proposed a specific forkcipher, ForkSkinny, based on the tweakable block cipher SKINNY, and its security was evaluated through cryptanalysis. Since then, several efficient AEAD and MAC schemes based on forkciphers have been proposed, catering not only to short messages but also to various purposes such as leakage resilience and cloud security. While forkciphers have proven to be efficient solutions for designing AEAD schemes, the area of forkcipher design remains unexplored, particularly the lack of provably secure forkcipher constructions.

In this work, we propose forkcipher design for various tweak lengths, based on a block cipher as the underlying primitive. We provide proofs of security for these constructions, assuming the underlying block cipher behaves as an ideal block cipher. First, we present a forkcipher, \widetilde{\textsf{F}}1, for an n-bit tweak and prove its optimal (n-bit) security. Next, we propose another construction, \widetilde{\textsf{F}}2, for a 2n-bit tweak, also proving its optimal (n-bit) security. Finally, we introduce a construction, \widetilde{\textsf{F}}r, for a general rn-bit tweak, achieving n-bit security.

ePrint: https://eprint.iacr.org/2024/1864

See all topics related to this paper.

Feel free to post resources that are related to this paper below.

Example resources include: implementations, explanation materials, talks, slides, links to previous discussions on other websites.

For more information, see the rules for Resource Topics .