Publikationen

Autor	Degabriele, Jean Paul; Fischlin, Marc; Govinden, Jérôme
Datum	2023
Art	Conference Proceedings
Abstrakt	The Duplex construction, introduced by Bertoni et al. (SAC 2011), is the Swiss Army knife of permutation-based cryptography. It can be used to realise a variety of cryptographic objects—ranging from hash functions and MACs, to authenticated encryption and symmetric ratchets. Testament to this is the STROBE protocol framework which is a software cryptographic library based solely on the Duplex combined with a rich set of function calls. While prior works have typically focused their attention on specific uses of the Duplex, our focus here is its indifferentiability. More specifically, we consider the indifferentiability of the Duplex construction from an online random oracle—an idealisation which shares its same interface. As one of our main results we establish the indifferentiability of the Duplex from an online random oracle. However indifferentiability only holds for the standard Duplex construction and we show that the full-state variant of the Duplex cannot meet this notion. Our indifferentiability theorem provides the theoretical justification for the security of the Duplex in a variety of scenarios, amongst others, its use as a general-purpose cryptographic primitive in the STROBE framework. Next we move our attention to AEAD schemes based on the Duplex, namely SpongeWrap, which is the basis for NIST’s Lightweight Cryptography standard Ascon. We harness the power of indifferentiability by establishing that SpongeWrap offers security against key-dependent message inputs, related-key attacks, and is also committing.
Konferenz	29th International Conference on the Theory and Application of Cryptology and Information Security (Asiacrypt 2023)
ISBN	978-981-99-8741-2
ISSN	0302-9743
Serie	Lecture Notes in Computer Science
In	Advances in Cryptology - ASIACRYPT 2023, p.237-269
Publisher	Springer
Url	https://tubiblio.ulb.tu-darmstadt.de/id/eprint/141984