Block Cipher Doubling for a Post-Quantum World - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Preprints, Working Papers, ... Year : 2023

Block Cipher Doubling for a Post-Quantum World


In order to maintain a similar security level in a post-quantum setting, many symmetric primitives should have to double their keys and increase their state sizes. So far, no generic way for doing this is known that would provide convincing quantum security guarantees. In this paper we propose a new generic construction, QuEME, that allows to double the key and the state size of a block cipher. The QuEME design is inspired by the ECB-Mix-ECB (EME) construction, but is defined for a different choice of mixing function that withstands our new quantum superposition attack that exhibits a periodic property found in collisions and that breaks EME and a large class of variants of it. We prove that QuEME achieves n-bit security in the classical setting, where n is the block size of the underlying block cipher, and at least n/6-bit security in the quantum setting. We propose a concrete instantiation of this construction, called Double-AES, that is built with variants of AES-128.
Fichier principal
Vignette du fichier
2022-1342.pdf (818.45 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-04328717 , version 1 (07-12-2023)




  • HAL Id : hal-04328717 , version 1


Maria Naya Plasencia, Ritam Bhaumik, André Chailloux, Paul Frixons, Bart Mennink. Block Cipher Doubling for a Post-Quantum World. 2023. ⟨hal-04328717⟩
60 View
48 Download


Gmail Facebook X LinkedIn More