Conventional Security Analysis - A Classical Introduction to Cryptography: Applications for Communications Security - page 133

we have

2 d 2

.

1
2

r
3

m
2

C ∗ ) 2 − BestAdv Cl a ( ( F 1 ,..., F r ) , ≤ . + 6 ε

By using the previous exercises, propose a construction for a Feistel cipher C such that

C ∗ ) 2 d 4 2 − m

BestAdv Cl a ( C , ≤ . .

Design a new block cipher. 10

10

This exercise was inspired by Ref. [183].