On Hiding a Plaintext Length by Preencryption

Creative Commons License

Tezcan C., Vaudenay S.

9th International Conference on Applied Cryptography and Network Security (ACNS), İspanya, 7 - 10 Haziran 2011, cilt.6715, ss.345-358 identifier identifier

  • Yayın Türü: Bildiri / Tam Metin Bildiri
  • Cilt numarası: 6715
  • Doi Numarası: 10.1007/978-3-642-21554-4_20
  • Basıldığı Ülke: İspanya
  • Sayfa Sayıları: ss.345-358
  • Orta Doğu Teknik Üniversitesi Adresli: Hayır

Özet

It is a well known fact that encryption schemes cannot hide a plaintext length when it is unbounded. We thus admit that an approximation of it may leak and we focus on hiding its precise value. Some standards such as TLS or SSH offer to do it by applying some pad-then-encrypt techniques. In this study, we investigate the information leakage when these techniques are used. We define the notion of padding scheme and its associated security. We show that when a padding length is uniformly distributed, the scheme is nearly optimal. We also show that the insecurity degrades linearly with the padding length.