IGE mode is broken (Re: IGE mode in OpenSSL)

[Travis H.]

On 9/10/06, James A. Donald <jamesd at echeque.com> wrote:
> Typo:
> > We transmit T(k)= {W(k)} + W(k-1)|{W(k-1)} where |
> > means bitwise or, curly brace means encryption.
> Should read:
> We transmit T(k) = {W(k)} + ((~W(k-11){W(k-1)})
> where ~ means bitwise negation, | means bitwise or,
> curly brace means encryption.

Today wasn't a good day for typing? ;-)

T(k) = {W(k)} + (~W(k-1)|{W(k-1)})

Right?

I'm in agreement with the "don't use a screwdriver as a crowbar"
crowd; unless the combined modes came with clear proofs and
very weak assumptions.... computers are fast and getting faster,
and my performance needs remain relatively constant.
-- 
"On the Internet noone knows you're a dog - except Bruce Schneier."
Unix "guru" for rent or hire -><- http://www.lightconsulting.com/~travis/
GPG fingerprint: 9D3F 395A DAC5 5CCC 9066  151D 0A6B 4098 0C55 1484

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at metzdowd.com