safety security
Two Rounds Were the Minimum for This Quantum-Secure Cipher
The Even-Mansour construction survived adaptive forward and inverse quantum queries in the ideal-permutation model.
Summary
The Even-Mansour construction survived adaptive forward and inverse quantum queries in the ideal-permutation model.
The authors prove information-theoretic security for the two-round Even-Mansour cipher against polynomially many adaptive quantum queries to all available oracles. They also show that essentially any construction with only one public-permutation call is quantumly insecure, making two rounds minimal within the stated model.
Why it matters
The Even-Mansour construction survived adaptive forward and inverse quantum queries in the ideal-permutation model.
Limits and context
- They also show that essentially any construction with only one public-permutation call is quantumly insecure, making two rounds minimal within the stated model.
Key claims
The Even-Mansour construction survived adaptive forward and inverse quantum queries in the ideal-permutation model.
Qualification: They also show that essentially any construction with only one public-permutation call is quantumly insecure, making two rounds minimal within the stated model.
Evidence: source-2026-10-01-017
Sources
- arXiv preprint 2609.40350arXiv · primary research
Corrections
No corrections have been recorded for this story.