In this work, we revisit the Hosoyamada-Iwata (HI) proof for the quantum CPA security of the 4-round Luby-Rackoff construction and identify a gap that appears to undermine the security proof. We emphasize that this is not an attack, and the construction may still achieve the claimed security level. However, this gap raises concerns about the feasibility of establishing a formal security proof for the 4-round Luby-Rackoff construction. In fact, the issue persists even if the number of rounds is increased arbitrarily. On a positive note, we restore the security of the 4-round Luby-Rackoff construction in the non-adaptive setting, achieving security up to superposition queries. Furthermore, we establish the quantum CPA security of the 4-round and 5-round constructions, up to and superposition queries, respectively, where n denotes the size of the underlying permutation.
International Conference on the Theory and Application of Cryptology and Information Security (ASIACRYPT)
2024-12-09
2025-01-09