{"id":"https://openalex.org/W4400081876","doi":"https://doi.org/10.1007/s10623-024-01449-z","title":"Security analysis of the ISO standard $$\\textsf{OFB}$$-$$\\textsf{DRBG}$$","display_name":"Security analysis of the ISO standard $$\\textsf{OFB}$$-$$\\textsf{DRBG}$$","publication_year":2024,"publication_date":"2024-06-27","ids":{"openalex":"https://openalex.org/W4400081876","doi":"https://doi.org/10.1007/s10623-024-01449-z"},"language":"en","primary_location":{"id":"doi:10.1007/s10623-024-01449-z","is_oa":true,"landing_page_url":"http://dx.doi.org/10.1007/s10623-024-01449-z","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10623-024-01449-z.pdf","source":{"id":"https://openalex.org/S81616010","display_name":"Designs Codes and Cryptography","issn_l":"0925-1022","issn":["0925-1022","1573-7586"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Designs, Codes and Cryptography","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://link.springer.com/content/pdf/10.1007/s10623-024-01449-z.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5099587117","display_name":"Woohyuk Chung","orcid":"https://orcid.org/0009-0002-3793-5291"},"institutions":[{"id":"https://openalex.org/I157485424","display_name":"Korea Advanced Institute of Science and Technology","ror":"https://ror.org/05apxxy63","country_code":"KR","type":"education","lineage":["https://openalex.org/I157485424"]}],"countries":["KR"],"is_corresponding":true,"raw_author_name":"Woohyuk Chung","raw_affiliation_strings":["KAIST, 291 Daehak-ro, Yuseong-gu, Daejeon, 34141, Republic of Korea"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"KAIST, 291 Daehak-ro, Yuseong-gu, Daejeon, 34141, Republic of Korea","institution_ids":["https://openalex.org/I157485424"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5104337301","display_name":"Hwigyeom Kim","orcid":null},"institutions":[{"id":"https://openalex.org/I157485424","display_name":"Korea Advanced Institute of Science and Technology","ror":"https://ror.org/05apxxy63","country_code":"KR","type":"education","lineage":["https://openalex.org/I157485424"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Hwigyeom Kim","raw_affiliation_strings":["KAIST, 291 Daehak-ro, Yuseong-gu, Daejeon, 34141, Republic of Korea"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"KAIST, 291 Daehak-ro, Yuseong-gu, Daejeon, 34141, Republic of Korea","institution_ids":["https://openalex.org/I157485424"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100401535","display_name":"Jooyoung Lee","orcid":"https://orcid.org/0000-0001-5471-9350"},"institutions":[{"id":"https://openalex.org/I157485424","display_name":"Korea Advanced Institute of Science and Technology","ror":"https://ror.org/05apxxy63","country_code":"KR","type":"education","lineage":["https://openalex.org/I157485424"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Jooyoung Lee","raw_affiliation_strings":["KAIST, 291 Daehak-ro, Yuseong-gu, Daejeon, 34141, Republic of Korea"],"raw_orcid":"https://orcid.org/0000-0001-5471-9350","affiliations":[{"raw_affiliation_string":"KAIST, 291 Daehak-ro, Yuseong-gu, Daejeon, 34141, Republic of Korea","institution_ids":["https://openalex.org/I157485424"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5030588181","display_name":"Yeongmin Lee","orcid":"https://orcid.org/0000-0002-8165-4502"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yeongmin Lee","raw_affiliation_strings":["DESILO Inc., 138 Seoun-ro, Seocho-gu, Seoul, 06619, Republic of Korea"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"DESILO Inc., 138 Seoun-ro, Seocho-gu, Seoul, 06619, Republic of Korea","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5099587117"],"corresponding_institution_ids":["https://openalex.org/I157485424"],"apc_list":{"value":2290,"currency":"EUR","value_usd":2890},"apc_paid":{"value":2290,"currency":"EUR","value_usd":2890},"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0735445,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"92","issue":"11","first_page":"3515","last_page":"3532"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.9975000023841858,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.6630381345748901},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.3343145549297333},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.33093538880348206},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.30790162086486816}],"concepts":[{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.6630381345748901},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.3343145549297333},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.33093538880348206},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.30790162086486816}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1007/s10623-024-01449-z","is_oa":true,"landing_page_url":"http://dx.doi.org/10.1007/s10623-024-01449-z","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10623-024-01449-z.pdf","source":{"id":"https://openalex.org/S81616010","display_name":"Designs Codes and Cryptography","issn_l":"0925-1022","issn":["0925-1022","1573-7586"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Designs, Codes and Cryptography","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1007/s10623-024-01449-z","is_oa":true,"landing_page_url":"http://dx.doi.org/10.1007/s10623-024-01449-z","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10623-024-01449-z.pdf","source":{"id":"https://openalex.org/S81616010","display_name":"Designs Codes and Cryptography","issn_l":"0925-1022","issn":["0925-1022","1573-7586"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Designs, Codes and Cryptography","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4400081876.pdf"},"referenced_works_count":16,"referenced_works":["https://openalex.org/W649077362","https://openalex.org/W1498886746","https://openalex.org/W1585289785","https://openalex.org/W1857692135","https://openalex.org/W1976476866","https://openalex.org/W2073445540","https://openalex.org/W2077667328","https://openalex.org/W2134101189","https://openalex.org/W2144336066","https://openalex.org/W2552378946","https://openalex.org/W2604510097","https://openalex.org/W2751246305","https://openalex.org/W2945267328","https://openalex.org/W3037004127","https://openalex.org/W4241158894","https://openalex.org/W4298403653"],"related_works":["https://openalex.org/W2748952813","https://openalex.org/W4391375266","https://openalex.org/W1979597421","https://openalex.org/W2007980826","https://openalex.org/W2051487156","https://openalex.org/W2061531152","https://openalex.org/W3002753104","https://openalex.org/W2077600819","https://openalex.org/W2142036596","https://openalex.org/W2072657027"],"abstract_inverted_index":{"Abstract":[0],"Deterministic":[1],"random":[2,17],"bit":[3],"generators":[4],"(DRBGs)":[5],"are":[6],"essential":[7],"tools":[8],"in":[9,115],"modern":[10],"cryptography":[11],"for":[12,25,84,97],"generating":[13],"secure":[14],"and":[15,27,66,139,201,209,243],"unpredictable":[16],"numbers.":[18],"The":[19,218],"ISO":[20],"DRBG":[21],"standards":[22],"provide":[23],"guidelines":[24],"designing":[26],"implementing":[28],"DRBGs,":[29],"including":[30,190],"four":[31],"algorithms:":[32],"$$\\textsf{HASH}\\text":[33],"{-}\\textsf{DRBG}$$":[34,45,56,68],"<mml:math":[35,46,57,69,100,106,129,150,156,168,197,229,235],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\">":[36,47,58,70,101,107,130,151,157,169,198,230,236],"<mml:mrow>":[37,48,59,71,131,170],"<mml:mi>HASH</mml:mi>":[38],"<mml:mtext>-</mml:mtext>":[39,50,61,73,133],"<mml:mi>DRBG</mml:mi>":[40,51,62,74,108,134,158,237],"</mml:mrow>":[41,52,63,75,135,186],"</mml:math>":[42,53,64,76,103,109,136,153,159,187,200,232,238],",":[43,54,65],"$$\\textsf{HMAC}\\text":[44],"<mml:mi>HMAC</mml:mi>":[49],"$$\\textsf{CTR}\\text":[55],"<mml:mi>CTR</mml:mi>":[60,132],"$$\\textsf{OFB}\\text":[67],"<mml:mi>OFB</mml:mi>":[72,102,152,231],".":[77],"While":[78],"security":[79,95,114,118],"analyses":[80],"have":[81],"been":[82,122],"conducted":[83],"the":[85,98,116,204,210,213,224,246,252],"former":[86],"three":[87],"algorithms,":[88],"there":[89],"is":[90,221],"a":[91],"lack":[92],"of":[93,207,212,227],"specific":[94],"analysis":[96],"$$\\textsf{OFB}$$":[99,149,228],"-":[104,154,233],"$$\\textsf{DRBG}$$":[105,155,234],"algorithm.":[110],"We":[111],"prove":[112,147],"its":[113],"robustness":[117,225],"framework":[119],"that":[120,148],"has":[121],"used":[123],"to":[124,222,249],"analyze":[125],"$$\\mathsf":[126],"{CTR\\text":[127],"{-}DRBG}$$":[128],"by":[137],"Hoang":[138],"Shen":[140],"at":[141],"Crypto":[142],"2020.":[143],"More":[144],"precisely,":[145],"we":[146],"provides":[160],"$$O(\\min":[161],"\\left\\{":[162],"\\frac{\\lambda":[163],"}{3},":[164],"\\frac{n}{2}":[165],"\\right\\}":[166],")$$":[167],"<mml:mi>O</mml:mi>":[171],"<mml:mo>(</mml:mo>":[172],"<mml:mo>min</mml:mo>":[173],"<mml:mfenced>":[174],"<mml:mfrac>":[175,180],"<mml:mi>\u03bb</mml:mi>":[176,199],"<mml:mn>3</mml:mn>":[177],"</mml:mfrac>":[178,183],"<mml:mo>,</mml:mo>":[179],"<mml:mi>n</mml:mi>":[181],"<mml:mn>2</mml:mn>":[182],"</mml:mfenced>":[184],"<mml:mo>)</mml:mo>":[185],"-bit":[188],"security,":[189],"ideal":[191],"cipher":[192],"queries,":[193],"where":[194],"$$\\lambda":[195],"$$":[196],"n":[202],"denote":[203],"lower":[205],"bound":[206,251],"min-entropy":[208],"size":[211],"underlying":[214],"block":[215],"cipher,":[216],"respectively.":[217],"proof":[219],"strategy":[220],"transform":[223],"game":[226,242],"into":[239],"an":[240],"indistinguishability":[241],"then":[244],"apply":[245],"H-coefficient":[247],"technique":[248],"upper":[250],"distinguishing":[253],"advantage.":[254]},"counts_by_year":[],"updated_date":"2025-12-26T23:08:49.675405","created_date":"2025-10-10T00:00:00"}
