Wouldn't a proof that AES-128 were reducible to CS2-128, so that any successful attack on CS2-128 would also constitute a successful attack on AES-128, provide exactly the situation that he describes? CS2-128 would be "provably as secure as" AES-128. On Thu, 24 Mar 2005, Adam Shostack wrote: > Really? How does one go about proving the security of a block cipher? > > My understanding is that you, and others, perform attacks against it, > and see how it holds up. Many of the very best minds out there > attacked AES, so for your new CS2 cipher to be "provably just as > secure as AES-128," all those people would have had to have spent as > much time and energy as they did on AES. That strikes me as unlikely, > there's a lot more interest in hash functions today. > > Adam > > PS: I've added the cryptography mail list to this. Some of the folks > over there may be interested in your claims. > > On Wed, Mar 23, 2005 at 05:00:25PM -0800, BugTraq wrote: > | Secure Science is offering a preview of one of the 3 ciphers they will > | be publishing througout the year. The CS2-128 cipher is a 128-bit block > | cipher with a 128 bit key. This cipher is proposed as an alternative > | hardware-based cipher to AES, being that it is more efficient in > | hardware, simpler to implement, and provably just as secure as AES-128. > | > | http://www.securescience.net/ciphers/csc2/ > | > | -- > | Best Regards, > | Secure Science Corporation > | [Have Phishers stolen your customers' logins? Find out with DIA] > | https://slam.securescience.com/signup.cgi - it's free! > | >
