This is an old revision of the document!


Diverse exercitii

Exercise 3

How can you distinguish a cipher composed only of a Feistel network from a random function if it has only (a) one round, (b) two rounds?

For clarity, here is an image of such a cipher with two rounds:

Exercise 4

A sequence of plaintext blocks M1, . . . , M8 is encrypted using DES into a sequence of ciphertext blocks. Where an IV is used, it is numbered C0. A transmission error occurs and one bit in ciphertext block C3 changes its value. As a consequence, the receiver obtains after decryption a corrupted plaintext block sequence M1′,…,M8′. For the discussed modes of operation (ECB, CBC), how many bits do you expect to be wrong in each block Mi′? (Hint: You may find it helpful to draw decryption block diagrams.)

Please motivate your answer.

sasc/res/stuff.1457427793.txt.gz · Last modified: 2016/03/08 11:03 by marios.choudary
CC Attribution-Share Alike 3.0 Unported
www.chimeric.de Valid CSS Driven by DokuWiki do yourself a favour and use a real browser - get firefox!! Recent changes RSS feed Valid XHTML 1.0