Indifferentiability with Distinguishers: Why Shabal Does Not Require Ideal Ciphers.

Emmanuel Bresson Anne Canteaut Benoît Chevallier-Mames Christophe Clavier Thomas Fuhr Aline Gouget Thomas Icart Jean-François Misarsky María Naya-Plasencia Pascal Paillier Thomas Pornin Jean-René Reinhard Céline Thuillet Marion Videau Indifferentiability with Distinguishers: Why Shabal Does Not Require Ideal Ciphers. 199 2009 2009 IACR Cryptology ePrint Archive http://eprint.iacr.org/2009/199 db/journals/iacr/iacr2009.html#BressonCCCFGIMNPPRTV09