The Sum of PRPs Is a Secure PRF

Given d independent pseudorandom permutations (PRPs) i, . . . , d over {0, 1}n , it appears natural to define a pseudorandom function (PRF) by adding (or XORing) the permutation results: sumd (x) = 1(x)

• Type: Conference
• Year: 2000
• Where: EUROCRYPT
• Authors: Stefan Lucks
• Keywords: Cryptology, EUROCRYPT 2000, Independent Pseudorandom Permutations, Pseudorandom Function, Single Prp