| 词条 | Xor–encrypt–xor |
| 释义 |
The xor–encrypt–xor (XEX) is a (tweakable) mode of operation of a block cipher.
HistoryIn 1984, to protect DES against exhaustive search attacks, Ron Rivest proposed DESX: XOR a prewhitening key to the plaintext, encrypt the result with DES using a secret key, and then XOR a postwhitening key to the encrypted result to produce the final ciphertext.[3] In 1991, motivated by Rivest's DESX construction, Even and Mansour proposed a much simpler scheme (the "two-key Even–Mansour scheme"), which they suggested was perhaps the simplest possible block cipher: XOR the plaintext with a prewhitening key, apply a publicly known unkeyed permutation (in practice, a pseudorandom permutation) to the result, and then XOR a postwhitening key to the permuted result to produce the final ciphertext.[3][4] Studying simple Even–Mansour style block ciphers gives insight into the security of Feistel ciphers (DES-like ciphers) and helps understand block cipher design in general.[5] Orr Dunkelman, Nathan Keller, and Adi Shamir later proved it was possible to simplify the Even–Mansour scheme even further and still retain the same provable security, producing the "single-key Even–Mansour scheme": XOR the plaintext with the key, apply a publicly known unkeyed permutation to the result, and then XOR the same key to the permuted result to produce the final ciphertext.[3] Rogaway used XEX to allow efficient processing of consecutive blocks (with respect to the cipher used) within one data unit (e.g., a disk sector) for whole-disk encryption.[6] Many whole-disk encryption systems – BestCrypt, dm-crypt, FreeOTFE, TrueCrypt, DiskCryptor, FreeBSD's geli, OpenBSD softraid disk encryption software, and Mac OS X Lion's FileVault 2 – support XEX-based tweaked-codebook mode with ciphertext stealing (XTS mode). {{cryptography navbox|block}}References1. ^Barış Ege, Elif Bilge Kavun, and Tolga Yalçın. "Memory Encryption for Smart Cards". 2011. {{DEFAULTSORT:Xor-encrypt-xor}}{{crypto-stub}}2. ^Emmanuel Prouff. [https://books.google.com/books?id=G2TlxEGwnzUC "Smart Card Research and Advanced Applications"]. 2011, p. 201. 3. ^1 2 Orr Dunkelman, Nathan Keller, and Adi Shamir. "Minimalism in Cryptography: The Even–Mansour Scheme Revisited". 4. ^Joan Daemen, Laboratorium Esat. "Limitations of the Even–Mansour Construction". 1992. {{doi| 10.1007/3-540-57332-1_46}} 5. ^Craig Gentry and Zulfikar Ramzan. [https://www.iacr.org/cryptodb/archive/2004/ASIACRYPT/218/218.pdf "Eliminating Random Permutation Oracles in the Even–Mansour Cipher"]. 2004. 6. ^{{cite web |last=Rogaway |first=Phillip |date=2004-09-24 |url=http://www.cs.ucdavis.edu/~rogaway/papers/offsets.pdf |title=Efficient Instantiations of Tweakable Blockciphers and Refinements to Modes OCB and PMAC}} 2 : Block cipher modes of operation|Key management |
| 随便看 |
|
开放百科全书收录14589846条英语、德语、日语等多语种百科知识，基本涵盖了大多数领域的百科知识，是一部内容自由、开放的电子版国际百科全书。