[Cryptography] [Crypto-practicum] Justify the sequence of operations in CTR mode.

[Ron Garret]

On Feb 16, 2016, at 11:03 AM, Ryan Carboni <ryacko at gmail.com> wrote:

> Why not use single-key Even-Mansour-like construction?
> 
> Ciphertext = E( E(CTR) XOR plaintext)) XOR E(CTR)
> 
> Costs only two encryptions, both parallelizable,

I don’t think so.  You have an iterated encryption E(E(…)).  That looks like a serial dependency to me.

rg