Institute of Information Science, Academia Sinica

Indifferentiability is a security notion that allows us compare a real construction to an idealized primitive. It generalizes the notion of indistinguishability to cases where a construction uses a public function that is accessible to all parties. In this talk, I will examine the indifferentiability of classical constructions such as the sponge function and the Feistel network in the the presence of a quantum adversary. I will show that under a certain information-theoretic assumption, perfect quantum indifferentiability is impossible in a large number of cases.