1

Suppose you have a cryptographic permutation consisting of identical rounds, that makes it vulnerable to a slide attack. But if you sandwich it between two XORs of key material. Is it still vulnerable?

Even-Mansour block cipher construction works on such a principle although it says nothing about a permutation with identical rounds.

What is the reason for why AES and most other block ciphers employ a key schedule instead of an Even-Mansour construction?

0 Answers0