On the optimality of non-linear computations for symmetric key primitives

A block is an n-bit string, and a (possibly keyed) block-function is a non-linear mapping that maps one block to another, e.g., a block-cipher. In this paper, we consider various symmetric key primitives with l block inputs and raise the following question: what is the minimum number of block-function invocations required for a mode to be...More