[Cryptography] Dan Bernstein has a new blog entry on key breaking

Jerry Leichter leichter at lrw.com
Tue Nov 24 14:03:40 EST 2015


>> The other key can simply be the same for every block, no need for RC4:
>> 
>> 	K_1 xor AES(K_2, data) xor K_1
> 
> Err, unless I've missed something, isn't this just the AES() bit?  Those 
> two XORs would cancel out...
Parenthesis fail.  That should be:

K_1 xor AES(K_2, data xor K_1)

                                                        -- Jerry




More information about the cryptography mailing list