PARALLEL AND SEQUENTIAL COMPOSITIONS OF PSEUDORANDOM PERMUTATIONS

are one of the fundamental primitives for cryptographic protocol design. Most importantly, they provide a basis for private-key cryptography. A random function is called a pseudorandom function (PRF) if it is indistinguishable in practice fro