How to stretch random functions: the security of protected counter sums

Abstract

Let f be an unpredictable random function taking (fc+c)-bit inputs to fc-bit outputs. This paper presents an unpredictable random function /' taking variable-length inputs to b-bil outputs. This construction has several advantages over chaining, which was proven unpredictable by Bellare, Kilian, and Rogaway, and cascading, which was proven unpredictable by Bellare, Canetti, and Krawczyk. The highlight here is a very simple proof of security. © 1999 International Association for Cryptologic Research.