Is the AES encryption scheme CPA secure?

Question

Give a 256 bit key space and 128 message space would AES block cipher as the encryption scheme be CPA secure?

AES is just a primitive. You should describe how you use it to build an actual encryption scheme. And how do you use the IV? — CodesInChaos, Nov 26 '12 at 21:33
@CodesInChaos Reading this back (a comment pointed to it) I think the AES block cipher is an encryption scheme. One that only accepts 128 bit messages, but that seems to be the defined message space in the question. — Maarten Bodewes, Jul 15 '14 at 20:41

score 5 · Answer 1 · answered Nov 27 '12 at 10:41

You are mistaken about what an encryption scheme is. As CodeInChaos pointed out AES is a primitive and we assume that it is a preudo random permutation. That is an assumption since the way AES is built means that we won't be able to formally prove that it is one. With that PRP we try to build modes of encryption that might or might not be CPA-secure I encourage you to read Mihir Bellare course notes and especially the chapters about Symmetric encryption and pseudo random functions http://cseweb.ucsd.edu/~mihir/cse207/

AES is also an encryption scheme is you consider it as a way to encrypt 128 bits blocks — David 天宇 Wong, Sep 23 '16 at 21:06

score 2 · Answer 2 · answered Nov 27 '12 at 11:31

2

Using AES with a random oracle IV as in CBC mode or using a unique nonce as in CTR constrction will result in a CPA secure construction. You cannot play with the size of the key. The key is strictly defined in each mode.

answered Nov 27 '12 at 11:31

curious

6,160
6
32
45

How do you prove AES-CTR is IND-CPA with a unique nonce? – Cyker May 17 '20 at 01:46

Is the AES encryption scheme CPA secure?

2 Answers2

Linked