Answered step by step
Verified Expert Solution
Question
1 Approved Answer
[Insecure PRF) Let F be a secure PRF. Let X denote a bitwise complement of the string x. Define a new function F'(k,x) = F(k,x)
[Insecure PRF) Let F be a secure PRF. Let X denote a bitwise complement of the string x. Define a new function F'(k,x) = F(k,x) || F(k,x), where "I" denotes concatenation. Show that F' is not a secure PRF. Hints and tips: Construct an adversary that distinguishes F from a random function. Remember that by the definition of PRF, an adversary is allowed to query PRF on arbitrary inputs. Remember that under a fixed key k, any PRF returns the same outputs when queried on the same inputs-you may apply this observation to F. [Insecure PRF) Let F be a secure PRF. Let X denote a bitwise complement of the string x. Define a new function F'(k,x) = F(k,x) || F(k,x), where "I" denotes concatenation. Show that F' is not a secure PRF. Hints and tips: Construct an adversary that distinguishes F from a random function. Remember that by the definition of PRF, an adversary is allowed to query PRF on arbitrary inputs. Remember that under a fixed key k, any PRF returns the same outputs when queried on the same inputs-you may apply this observation to F
Step by Step Solution
There are 3 Steps involved in it
Step: 1
Get Instant Access to Expert-Tailored Solutions
See step-by-step solutions with expert insights and AI powered tools for academic success
Step: 2
Step: 3
Ace Your Homework with AI
Get the answers you need in no time with our AI-driven, step-by-step assistance
Get Started