Consider a new block cipher, DES2, that consists of only two rounds of the DES block cipher. DES2 has the same block and key size as DES. For this question, you should consider the DES F function as a black box that takes two inputs, a 32 -bit data segment, and a 48 -bit round key, and produces a 32 -bit output. Using the chosen-plaintext attack

Question

Consider a new block cipher, DES2, that consists of only two rounds of the DES block cipher. DES2 has the same block and key size as DES. For this question, you should consider the DES

F

function as a black box that takes two inputs, a 32 -bit data segment, and a 48 -bit round key, and produces a 32 -bit output. Using the chosen-plaintext attack (CPA) without any restrictions on the number of oracle calls. a) Give an algorithm to recover the 48 -bit round keys for round

1(k_(1))

and round

2(k_(2))

. Your algorithm should have fewer operations than the exhaustive key search for DES2. b) Can your algorithm be converted into a distinguishing attack against DES2, i.e., an attack that distinguishes DES2 ciphertext from a random permutation?

Accepted Answer

Expert Answer to -   Consider a new block cipher, DES2, that consists of only two rounds of the DES block cipher. DES2

Answer

Solution for -   Consider a new block cipher, DES2, that consists of only two rounds of the DES block cipher. DES2

Answer

This an additional answer to -   Consider a new block cipher, DES2, that consists of only two rounds of the DES block cipher. DES2

(Solved): Consider a new block cipher, DES2, that consists of only two rounds of the DES block cipher. DES2 ...

View Expert Answer

Expert Answer

Buy This Answer $5

Place Order

We Provide Services Across The Globe