Score:1

Probability of getting a collision using chosen plaintext attacks

jp flag

For university I am doing a piece of coursework right now. This question is focusing on CPA and collisions using CPA.

Question:

enter image description here

I have attempted to answer part 3, but am not very confident in the answer. If anyone could please take the time to look at the question and look at my answer to let me know if I am going in the right sort of direction that would be greatly appreciated.

My answer:

From the description of the encryption scheme in this question I have come to the conclusion that if $2^u$ queries are needed to have a 50% chance of predicting whether b is 0 or 1, this is because after $2^u$ queries the random nonce will have repeated itself at least once. However, due to the fact that the oracle has a 50% chance of returning the encryption of P0 or P1 $2^u$ queries only gives you a 50% chance of guessing the value of b.

As part 3 is only asking for the number of queries needed to correctly guess b with a probability greater than a half that means that $q > 2^u$. Then using the birthday paradox $q > \sqrt{2^u}$

Once again, thank you to anyone that takes the time out to respond to this.

fgrieu avatar
ng flag
The part of the would-be answer telling the random nonce must have repeated itself after $2^u$ queries is correct. Hint: what should be these $2^u$ queries and the handling of their results to make good use of that fact, and find $b$ with certainty, assuming $v\ge u$? Using the same strategy only with less queries, when does it succeed with certainty ? Note: if one reads Q3 literally, the correct answer is AT LEAST TWO, and the note in parenthesis is pointless; I guess Q3 really wants to ask how big $q$ should be to have nearly 50% (or more than 39%) chance to guess $b$ _with certainty_.
I sit in a Tesla and translated this thread with Ai:

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.