Indifferentiability with Distinguishers: Why Shabal Does Not Require Ideal Ciphers
by Emmanuel Bresson and
Anne Canteaut and
Benoît Chevallier-Mames and
Christophe Clavier and
Thomas Fuhr and
Aline Gouget and
Thomas Icart and
Jean-Francois Misarsky and
María Naya-Plasencia and
Pascal Paillier and
Thomas Pornin and
Jean-Rene Reinhard and
Celine Thuillet and
Marion Videau